SCARD

Suspicious activity by IP address 104.23.168.90

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 17:19:43 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.23.168.90

Description Count
ET WEB_SERVER WEB-PHP phpinfo access 12
ET EXPLOIT GraphQL Introspection Query Attempt 2
ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) 2
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak 1

Detailed activity by IP address 104.23.168.90

Timestamp Description Protocol Destination Port
2026-09-25 17:19:43 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-09-19 19:31:13 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-09-19 19:31:13 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-09-13 01:37:42 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-09-13 01:37:42 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-09-07 14:11:39 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-09-07 14:11:39 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-08-07 11:25:41 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-08-07 11:25:41 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-07-22 07:05:58 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-07-22 07:05:58 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-27 09:57:37 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-27 09:57:37 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-26 06:55:07 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-26 06:55:07 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-26 06:55:07 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-26 06:55:07 ET WEB_SERVER WEB-PHP phpinfo access TCP 80

 

Back to top