SCARD

Suspicious activity by IP address 162.158.94.239

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 28 Jun 2026 19:36:17 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 162.158.94.239

Description Count
ET SCAN LeakIX Inbound User-Agent 12
ET EXPLOIT GraphQL Introspection Query Attempt 8
ET HUNTING Request for Webshell in .well-known directory 2

Detailed activity by IP address 162.158.94.239

Timestamp Description Protocol Destination Port
2026-06-28 19:36:17 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-28 19:36:17 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-06-28 19:36:17 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-06-28 19:36:17 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-14 21:47:39 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-04-14 21:47:39 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-04-10 16:39:42 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-04-10 16:39:42 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-10 16:39:41 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-10 16:39:41 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-04-10 15:39:00 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-04-10 15:39:00 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-04-10 15:39:00 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-10 15:39:00 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-09 16:33:26 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-09 16:33:26 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-30 14:21:49 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-30 14:21:49 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-30 14:21:48 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-30 14:21:48 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-30 13:21:06 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-30 13:21:06 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top