SCARD

Suspicious activity by IP address 104.23.172.67

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 15:25:27 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.23.172.67

Description Count
ET WEB_SERVER WEB-PHP phpinfo access 10
ET SCAN LeakIX Inbound User-Agent 8
ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML 4
ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) 3
ET EXPLOIT GraphQL Introspection Query Attempt 2

Detailed activity by IP address 104.23.172.67

Timestamp Description Protocol Destination Port
2026-09-25 15:25:27 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-09-13 17:17:47 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-08-22 00:31:08 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-08-20 04:53:49 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-08-20 04:06:57 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-08-20 03:53:17 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-08-20 03:06:08 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-07-30 13:35:17 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-07-30 13:35:17 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-07-24 15:18:09 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-07-24 15:18:09 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-07-21 17:44:18 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-07-21 17:44:18 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-07-18 10:48:14 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-07-18 10:48:14 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-05-22 20:11:35 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-05-22 20:11:35 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-05-22 20:11:35 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-22 20:11:35 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-22 19:11:07 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-22 19:11:07 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-01 00:12:38 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-01 00:12:37 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-30 23:12:00 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-30 23:12:00 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-29 23:20:25 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-03-29 23:20:25 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80

 

Back to top