JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.22.109.92

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

27 reports

16 reporters · latest 2 hours ago

104.22.109.92 is on our whitelist as Cloudflare Reverse Proxy via the subnet 104.16.0.0/13.

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

27 from 16 distinct reporters

First reported

August 21st 2026

Most recent report

2 hours ago

Last 60 days

Top reporter locations 🇧🇷 Brazil 5 🇨🇿 Czechia 5 🇫🇷 France 4

Most common categories Brute-Force 12 Web App Attack 12 SSH 5 Bad Web Bot 4 Port Scan 2

Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 paradoxnetworks	2026-11-14 17:19:10 UTC · (2 hours ago)	2026-11-14T17:19:01.385898+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[49334]: Failed password for root from 104.22.109.92 port 62533 ssh2 2026-11-14T17:19:05.021943+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[49334]: Failed password for ro ... show more 2026-11-14T17:19:01.385898+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[49334]: Failed password for root from 104.22.109.92 port 62533 ssh2 2026-11-14T17:19:05.021943+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[49334]: Failed password for root from 104.22.109.92 port 62533 ssh2 2026-11-14T17:19:09.694141+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[49334]: Failed password for root from 104.22.109.92 port 62533 ssh2 ... show less	Brute-Force SSH
🇧🇷 paradoxnetworks	2026-11-13 14:55:07 UTC · (1 day ago)	2026-11-13T14:54:57.056509+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4026073]: Failed password for root from 104.22.109.92 port 51677 ssh2 2026-11-13T14:55:02.092202+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4026073]: Failed password fo ... show more 2026-11-13T14:54:57.056509+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4026073]: Failed password for root from 104.22.109.92 port 51677 ssh2 2026-11-13T14:55:02.092202+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4026073]: Failed password for root from 104.22.109.92 port 51677 ssh2 2026-11-13T14:55:07.253318+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4026073]: Failed password for root from 104.22.109.92 port 51677 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-12 20:22:50 UTC · (1 day ago)	IP matched detection query many 3xx errors.	Brute-Force
🇨🇿 Prcek	2026-11-12 03:23:11 UTC · (2 days ago)	PortScan:HOST=104.22.109.92,DPORTS=443	Port Scan
🇧🇷 paradoxnetworks	2026-11-09 14:47:58 UTC · (5 days ago)	2026-11-09T14:47:52.391337+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3214173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.22.109.92 2026-11-09T14:47:54.641663+00:00 edge-con-sao01.int.pdx.net.uk ... show more 2026-11-09T14:47:52.391337+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3214173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.22.109.92 2026-11-09T14:47:54.641663+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3214173]: Failed password for invalid user debian from 104.22.109.92 port 49660 ssh2 2026-11-09T14:47:57.502383+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3214212]: Invalid user ts3 from 104.22.109.92 port 49664 ... show less	Brute-Force SSH
🇧🇷 paradoxnetworks	2026-11-06 15:20:44 UTC · (1 week ago)	2026-11-06T15:14:29.264566+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2595563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.22.109.92 2026-11-06T15:14:31.122438+00:00 edge-con-sao01.int.pdx.net.uk ... show more 2026-11-06T15:14:29.264566+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2595563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.22.109.92 2026-11-06T15:14:31.122438+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2595563]: Failed password for invalid user nginx from 104.22.109.92 port 50360 ssh2 2026-11-06T15:20:42.890467+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2596752]: Invalid user ubuntu from 104.22.109.92 port 62953 ... show less	Brute-Force SSH
🇺🇸 MPL	2026-11-06 10:06:15 UTC · (1 week ago)	tcp/443 (5 or more attempts)	Port Scan
🇺🇸 gbutiri	2026-10-26 12:37:42 UTC · (2 weeks ago)	Automated report: source IP probed nonexistent .php paths on our web server (vulnerability scanning / bad bot).	Web App Attack Bad Web Bot
🇫🇷 dynamix	2026-10-21 11:09:16 UTC · (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-10-20 00:50:46 UTC · (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇩🇪 sternwart	2026-10-19 19:00:21 UTC · (3 weeks ago)	Automatisch erkannt: Zugriff auf /.git/config (hackits.alpasana.ch)	Web App Attack Bad Web Bot
🇳🇴 jad-abuse	2026-10-18 19:39:04 UTC · (3 weeks ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Observed by 1 sensor(s); 2 hits.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-18 12:58:22 UTC · (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 104.22.109.92 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 08:58:18.605962 2026] [security2:error] [pid 14821:tid 14846] [client 104.22.109.92:9957] Mo ... show more (mod_security) mod_security (id:210730) triggered by 104.22.109.92 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 08:58:18.605962 2026] [security2:error] [pid 14821:tid 14846] [client 104.22.109.92:9957] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|guitarmans.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "guitarmans.com"] [uri "/guitarmans.sql"] [unique_id "atTCapesR8KVwPfIBDHiLgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-18 04:04:56 UTC · (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.22.109.92 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 00:04:33.632681 2026] [security2:error] [pid 31641:tid 31641] [client 104.22.109.92:10151] M ... show more (mod_security) mod_security (id:210492) triggered by 104.22.109.92 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 00:04:33.632681 2026] [security2:error] [pid 31641:tid 31641] [client 104.22.109.92:10151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "herstonfarm.com"] [uri "/.env.old"] [unique_id "atRFUd5aBpAiCgxcHd_OqwAAAAA"], referer: https://www.google.com/search?q=herstonfarm.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-17 19:40:25 UTC · (3 weeks ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 179.184.0.32

🇺🇸 130.49.79.170

🇨🇳 120.48.175.69

🇨🇳 117.140.134.195

🇷🇺 91.202.233.64

🇨🇳 202.104.14.68

🇧🇷 201.18.105.214

🇨🇳 183.134.40.82

🇫🇷 178.33.160.209

🇮🇳 117.247.23.131

🇮🇳 45.223.81.5

🇫🇮 45.133.114.48

🇧🇷 45.70.50.10

🇺🇸 205.186.133.16

🇺🇸 137.184.17.112

🇺🇸 136.144.42.103

🇩🇪 89.1.218.65

🇳🇱 86.38.187.83

🇮🇳 20.219.139.13

🇷🇴 2.57.121.25