SCARD

Suspicious activity by IP address 104.23.239.132

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 13 Apr 2026 16:34:24 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.23.239.132

Description Count
ET SCAN LeakIX Inbound User-Agent 8
ET EXPLOIT GraphQL Introspection Query Attempt 2
ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML 2

Detailed activity by IP address 104.23.239.132

Timestamp Description Protocol Destination Port
2026-04-13 16:34:24 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-04-13 16:34:24 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-04-10 11:31:02 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-10 11:31:02 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-10 10:30:16 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-04-10 10:30:16 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-10 10:30:16 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-10 10:30:16 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 11:34:43 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 11:34:43 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 10:34:08 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 10:34:08 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top