SCARD

Suspicious activity by IP address 104.22.104.40

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 10:29:59 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.22.104.40

Description Count
ET WEB_SERVER WEB-PHP phpinfo access 4
ET WEB_SERVER PHP Possible https Local File Inclusion Attempt 2
ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) 2
ET HUNTING Request for Webshell in .well-known directory 1

Detailed activity by IP address 104.22.104.40

Timestamp Description Protocol Destination Port
2026-09-25 10:29:59 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-09-25 10:29:51 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-09-22 07:43:57 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-09-22 07:43:57 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-09-22 07:43:27 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-09-22 07:43:27 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-08-21 04:19:33 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-08-19 00:33:18 ET WEB_SERVER PHP Possible https Local File Inclusion Attempt TCP 80
2026-08-18 10:14:57 ET WEB_SERVER PHP Possible https Local File Inclusion Attempt TCP 80

 

Back to top