SCARD

Suspicious activity by IP address 172.71.198.122

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Tue, 14 Jul 2026 13:13:24 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.198.122

Description Count
ET WEB_SERVER WEB-PHP phpinfo access 6
ET SCAN LeakIX Inbound User-Agent 4
ET HUNTING Request for Webshell in .well-known directory 4

Detailed activity by IP address 172.71.198.122

Timestamp Description Protocol Destination Port
2026-07-14 13:13:24 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-14 13:13:24 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-14 12:12:30 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-14 12:12:30 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-17 22:19:36 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-17 22:19:35 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-17 21:19:09 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-17 21:19:09 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-17 21:19:09 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-17 21:19:09 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-30 03:18:30 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-04-30 03:18:30 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-04-01 07:22:57 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-04-01 07:22:57 ET HUNTING Request for Webshell in .well-known directory TCP 80

 

Back to top