104.22.109.6

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Whitelisted Subnet

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Abuse Confidence Score
0% Low Risk
15 reports
9 reporters ยท latest 4 days ago

104.22.109.6 is an IP address from within our whitelist belonging to the subnet 104.16.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 9 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ท๐Ÿ‡ด Romania 4 ๐Ÿ‡ง๐Ÿ‡ฌ Bulgaria 2 ๐Ÿ‡ซ๐Ÿ‡ท France 2
Most common categories Web App Attack 9 Hacking 3 Brute-Force 2 Bad Web Bot 1 SSH 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ง๐Ÿ‡ฌ Stoyko Stoykov
104.22.109.6 - - [24/Oct/2026:11:57:07 +0300] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" ...
Hacking Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ ipoac.nl
ipoac.nl:80 104.22.109.6 - - [24/Oct/2026:00:18:47 +0200] - "GET /wp-admin/install.php?step=1 HTTP/1.1" 403 1709 "-" "http://-/wp-admin/install.php?step=1"
Bad Web Bot
๐Ÿ‡ง๐Ÿ‡ฌ Stoyko Stoykov
104.22.109.6 - - [22/Oct/2026:21:19:59 +0300] "GET /wp/wp-json/ HTTP/2.0" 404 1856 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0" ...
Hacking Web App Attack
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: proto8 (1 total hits)
Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท LoneRider
Hacking
๐Ÿ‡ซ๐Ÿ‡ท dynamix
Multiple WAF Violations
Web App Attack
Anonymous
Web Probe / Attack
Web App Attack
๐Ÿ‡ง๐Ÿ‡ท paradoxnetworks
Brute-Force SSH
Anonymous
Web Probe / Attack
Web App Attack
๐Ÿ‡ง๐Ÿ‡ช madeit
Web App Attack
Anonymous
Web Probe / Attack
Web App Attack
Anonymous
Web Probe / Attack
Web App Attack
Anonymous
Web App Attack
Anonymous
Web Probe / Attack
Web App Attack
๐Ÿ‡ง๐Ÿ‡ช madeit
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฉ๐Ÿ‡ช 213.209.159.226
๐Ÿ‡ณ๐Ÿ‡ฑ 170.168.173.92
๐Ÿ‡บ๐Ÿ‡ธ 155.212.109.73
๐Ÿ‡ฎ๐Ÿ‡ฉ 103.125.88.6
๐Ÿ‡ฎ๐Ÿ‡ณ 103.106.137.174
๐Ÿ‡ฏ๐Ÿ‡ต 35.194.104.167
๐Ÿ‡ฆ๐Ÿ‡ท 190.183.30.227
๐Ÿ‡ง๐Ÿ‡ท 186.218.127.36
๐Ÿ‡จ๐Ÿ‡ณ 180.76.188.13
๐Ÿ‡จ๐Ÿ‡ณ 123.244.62.87
๐Ÿ‡ฎ๐Ÿ‡ณ 115.97.200.136
๐Ÿ‡จ๐Ÿ‡ณ 103.255.200.90
๐Ÿ‡ฎ๐Ÿ‡น 95.255.158.96
๐Ÿ‡บ๐Ÿ‡ธ 50.6.205.47
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.152
๐Ÿ‡ฎ๐Ÿ‡ณ 34.93.54.195
๐Ÿ‡จ๐Ÿ‡ญ 213.55.171.188
๐Ÿ‡ง๐Ÿ‡ท 201.16.201.105
๐Ÿ‡ฆ๐Ÿ‡ท 181.23.54.239
๐Ÿ‡ฎ๐Ÿ‡ณ 125.20.165.213