SCARD

Suspicious activity by IP address 172.71.81.25

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Tue, 14 Jul 2026 15:10:08 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.81.25

Description Count
ET SCAN LeakIX Inbound User-Agent 8
ET SCAN SFTP/FTP Password Exposure via sftp-config.json 2
ET EXPLOIT GraphQL Introspection Query Attempt 2
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak 2

Detailed activity by IP address 172.71.81.25

Timestamp Description Protocol Destination Port
2026-07-14 15:10:08 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-07-14 15:10:08 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-14 15:10:07 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-14 15:10:07 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-07-14 14:09:14 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-14 14:09:14 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 07:54:21 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 07:54:19 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 06:53:46 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-07-08 06:53:46 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 06:53:46 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 06:53:46 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-06-23 05:15:50 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-06-23 05:15:50 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80

 

Back to top