SCARD

Suspicious activity by IP address 104.23.166.105

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Thu, 24 Sep 2026 17:25:30 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.23.166.105

Description Count
ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) 4
ET SCAN Laravel Debug Mode Information Disclosure Probe Inbound 2
ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) 2

Detailed activity by IP address 104.23.166.105

Timestamp Description Protocol Destination Port
2026-09-24 17:25:30 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-09-24 16:24:58 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-08-20 03:42:11 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-08-20 03:42:11 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-08-01 04:26:18 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-08-01 04:26:18 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-03-30 16:58:17 ET SCAN Laravel Debug Mode Information Disclosure Probe Inbound TCP 80
2026-03-30 16:58:17 ET SCAN Laravel Debug Mode Information Disclosure Probe Inbound TCP 80

 

Back to top