SCARD

Suspicious activity by IP address 104.22.66.158

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 24 May 2026 21:21:09 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.22.66.158

Description Count
ET SCAN SFTP/FTP Password Exposure via sftp-config.json 4
ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML 2
SERVER-WEBAPP PHPUnit PHP remote code execution attempt 2
ET SCAN LeakIX Inbound User-Agent 2

Detailed activity by IP address 104.22.66.158

Timestamp Description Protocol Destination Port
2026-05-24 21:21:09 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-05-24 21:21:08 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-05-24 20:20:44 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-05-24 20:20:44 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-24 13:08:13 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-04-24 13:08:13 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-04-14 22:16:52 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-14 22:16:52 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-30 14:56:52 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-03-30 14:56:52 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80

 

Back to top