SCARD

Suspicious activity by IP address 172.71.198.207

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 05 Apr 2026 16:11:05 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.198.207

Description Count
ET SCAN LeakIX Inbound User-Agent 4
ET SCAN FTPSync Settings Disclosure Attempt 2
ET SCAN SFTP/FTP Password Exposure via sftp-config.json 2
ET HUNTING Request for Webshell in .well-known directory 2

Detailed activity by IP address 172.71.198.207

Timestamp Description Protocol Destination Port
2026-04-05 16:11:05 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-05 16:11:04 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-05 15:10:36 ET SCAN FTPSync Settings Disclosure Attempt TCP 80
2026-04-05 15:10:36 ET SCAN FTPSync Settings Disclosure Attempt TCP 80
2026-04-03 08:48:00 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 08:47:59 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 07:47:31 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 07:47:31 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-31 09:22:22 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-03-31 09:22:22 ET HUNTING Request for Webshell in .well-known directory TCP 80

 

Back to top