SCARD

Suspicious activity by IP address 172.71.202.90

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Thu, 24 Sep 2026 23:59:29 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.202.90

Description Count
ET SCAN LeakIX Inbound User-Agent 4
ET HUNTING Request for Webshell in .well-known directory 4
ET WEB_SERVER WEB-PHP phpinfo access 1
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak 1

Detailed activity by IP address 172.71.202.90

Timestamp Description Protocol Destination Port
2026-09-24 23:59:29 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-08-30 11:32:27 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-08-25 16:25:54 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-08-25 12:00:18 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-08-25 12:00:18 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-08-24 11:04:09 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-19 17:19:19 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-19 17:19:18 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-19 16:18:37 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-19 16:18:37 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top