SCARD

Suspicious activity by IP address 104.23.172.96

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 30 May 2026 18:44:09 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.23.172.96

Description Count
ET SCAN LeakIX Inbound User-Agent 4
ET WEB_SERVER WEB-PHP phpinfo access 2
ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML 2
ET HUNTING Request for Webshell in .well-known directory 2

Detailed activity by IP address 104.23.172.96

Timestamp Description Protocol Destination Port
2026-05-30 18:44:09 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-05-30 18:44:09 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-05-27 10:46:48 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-27 10:46:48 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-16 22:34:22 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-04-16 22:34:22 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-04-03 17:36:32 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 17:36:31 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 16:35:50 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 16:35:50 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top