SCARD

Suspicious activity by IP address 104.23.239.49

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 03 Jul 2026 05:36:20 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.23.239.49

Description Count
ET SCAN LeakIX Inbound User-Agent 16
ET EXPLOIT GraphQL Introspection Query Attempt 4
ET WEB_SERVER WEB-PHP phpinfo access 2
ET HUNTING Request for Webshell in .well-known directory 2
ET SCAN SFTP/FTP Password Exposure via sftp-config.json 2
ET SCAN Web Scanner - Fuzz Faster U Fool (Inbound) 2

Detailed activity by IP address 104.23.239.49

Timestamp Description Protocol Destination Port
2026-07-03 05:36:20 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-03 05:36:18 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-03 04:35:40 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-03 04:35:40 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-03 04:35:40 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-07-03 04:35:40 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-06-14 08:14:08 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-14 08:14:06 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-14 07:13:35 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-14 07:13:35 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-29 10:43:05 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-05-29 10:43:05 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-05-25 18:53:33 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-05-25 18:53:33 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-05-22 06:15:34 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-22 06:15:34 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-22 00:41:35 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-22 00:41:34 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-21 23:40:59 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-21 23:40:59 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-20 04:17:16 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-20 04:17:16 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-27 18:31:40 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 18:31:40 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 18:31:40 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 18:31:40 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-26 07:34:17 ET SCAN Web Scanner - Fuzz Faster U Fool (Inbound) TCP 80
2026-03-26 07:34:17 ET SCAN Web Scanner - Fuzz Faster U Fool (Inbound) TCP 80

 

Back to top