SCARD

Suspicious activity by IP address 172.71.95.139

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 15:25:56 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.95.139

Description Count
ET SCAN LeakIX Inbound User-Agent 12
ET WEB_SERVER WEB-PHP phpinfo access 11
ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) 4
ET EXPLOIT GraphQL Introspection Query Attempt 2
ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML 2
ET SCAN Suspicious User-Agent Containing Web Scan/er Likely Web Scanner 2

Detailed activity by IP address 172.71.95.139

Timestamp Description Protocol Destination Port
2026-09-25 15:25:56 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-08-06 04:21:52 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-08-06 04:21:50 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-08-06 03:21:19 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-08-06 03:21:19 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-18 09:43:47 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-07-18 09:43:47 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-07-09 05:37:32 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-09 05:37:30 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-09 04:36:50 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-09 04:36:50 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-12 01:02:39 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-06-12 01:02:39 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-05-20 00:55:43 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-20 00:55:43 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-30 23:15:12 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-30 23:15:12 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-04-30 23:15:11 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-04-30 23:15:11 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-30 22:14:24 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-30 22:14:24 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-23 08:19:08 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-04-23 08:19:08 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-04-12 04:28:13 ET SCAN Suspicious User-Agent Containing Web Scan/er Likely Web Scanner TCP 80
2026-04-12 04:28:13 ET SCAN Suspicious User-Agent Containing Web Scan/er Likely Web Scanner TCP 80
2026-04-01 10:42:15 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-01 10:42:15 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-30 16:47:43 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-30 16:47:42 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-30 15:47:11 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-30 15:47:11 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-30 15:47:10 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-30 15:47:10 ET WEB_SERVER WEB-PHP phpinfo access TCP 80

 

Back to top