SCARD

Suspicious activity by IP address 104.23.166.65

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 22 Aug 2026 06:06:57 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.23.166.65

Description Count
ET SCAN LeakIX Inbound User-Agent 10
ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) 4
ET SCAN Suspicious User-Agent Containing Security Scan/ner Likely Scan 2
ET EXPLOIT GraphQL Introspection Query Attempt 2

Detailed activity by IP address 104.23.166.65

Timestamp Description Protocol Destination Port
2026-08-22 06:06:57 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-08-22 06:06:57 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-08-01 08:10:08 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-08-01 08:10:08 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-06-25 19:19:12 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-25 19:19:12 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-23 21:56:27 ET SCAN Suspicious User-Agent Containing Security Scan/ner Likely Scan TCP 80
2026-04-23 21:56:27 ET SCAN Suspicious User-Agent Containing Security Scan/ner Likely Scan TCP 80
2026-04-03 17:36:58 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 17:36:58 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 16:36:08 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 16:36:08 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 20:00:25 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 20:00:25 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 20:00:24 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 20:00:24 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 18:59:30 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 18:59:30 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top