JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.22.18.13

104.22.18.13 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 104.22.18.13 is an IP address from within our whitelist belonging to the subnet 104.16.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 104.22.18.13

Whois 104.22.18.13

IP Abuse Reports for 104.22.18.13:

This IP address has been reported a total of 12 times from 9 distinct sources. 104.22.18.13 was first reported on December 7th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jcbriar	2026-08-11 06:28:38 (1 week ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇧🇪 madeit	2026-08-10 01:37:40 (1 week ago)		Web App Attack
🇬🇧 OptimusGO	2026-07-31 06:21:08 (3 weeks ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-31 07:21:08 UTC Log evidence: 07/31/2026-07:21:07.312520 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 104.22.18.13:12573 -> 185.127.18.66:2083 show less	Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-05-11 11:07:42 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.22.18.13 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.22.18.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 07:07:35.400549 2026] [security2:error] [pid 30753:tid 30788] [client 104.22.18.13:12768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.longevityworkout.com"] [uri "/.env.development.local"] [unique_id "agG4dzboBfGU7zTeaj7iHQAAAJQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tavis.page	2026-04-14 05:09:42 (4 months ago)	Blocked by UFW on server [8443/tcp] Source port: 9227 TTL: 49 Packet length: 60 TOS: 0x00 This repo ... show more Blocked by UFW on server [8443/tcp] Source port: 9227 TTL: 49 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Campus France	2026-04-07 16:02:46 (4 months ago)	[Tue Apr 07 18:02:43.867748 2026] [php:error] [pid 594196] [client 104.22.18.13:12553] script '/var/ ... show more [Tue Apr 07 18:02:43.867748 2026] [php:error] [pid 594196] [client 104.22.18.13:12553] script '/var/www/html/wp-themes.php' not found or unable to stat [Tue Apr 07 18:02:44.316784 2026] [php:error] [pid 594196] [client 104.22.18.13:12553] script '/var/www/html/mariju.php' not found or unable to stat [Tue Apr 07 18:02:44.470059 2026] [php:error] [pid 594196] [client 104.22.18.13:12553] script '/var/www/html/waf_defender.php' not found or unable to stat [Tue Apr 07 18:02:44.776005 2026] [php:error] [pid 594196] [client 104.22.18.13:12553] script '/var/www/html/av.php' not found or unable to stat [Tue Apr 07 18:02:46.213560 2026] [php:error] [pid 594196] [client 104.22.18.13:12553] script '/var/www/html/theme.php' not found or unable to stat ... show less	Brute-Force Web App Attack
Anonymous	2026-04-04 02:10:08 (4 months ago)	\| SQL injection attempt.	Web App Attack Hacking SQL Injection
🇺🇸 octageeks.com	2026-03-22 04:07:25 (5 months ago)	Wordpress malicious attack:[octausername]	Web App Attack
🇩🇪 abdubhai	2025-12-25 10:27:49 (7 months ago)	104.22.18.13 - - [25/Dec/2025:15 ...	Brute-Force
🇫🇷 Campus France	2025-12-09 14:59:41 (8 months ago)	[Tue Dec 09 15:59:40.361135 2025] [php:error] [pid 2864184] [client 104.22.18.13:10802] script '/var ... show more [Tue Dec 09 15:59:40.361135 2025] [php:error] [pid 2864184] [client 104.22.18.13:10802] script '/var/www/html/wp-themes.php' not found or unable to stat, referer: https://www.google.com/ [Tue Dec 09 15:59:40.631870 2025] [php:error] [pid 2864184] [client 104.22.18.13:10802] script '/var/www/html/wp-user.php' not found or unable to stat, referer: https://www.google.com/ [Tue Dec 09 15:59:40.631870 2025] [php:error] [pid 2864184] [client 104.22.18.13:10802] script '/var/www/html/wp-user.php' not found or unable to stat, referer: https://www.google.com/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-08 09:37:27 (8 months ago)	[Mon Dec 08 10:37:21.868809 2025] [php:error] [pid 2727782] [client 104.22.18.13:10085] script '/var ... show more [Mon Dec 08 10:37:21.868809 2025] [php:error] [pid 2727782] [client 104.22.18.13:10085] script '/var/www/html/bless.php' not found or unable to stat, referer: https://www.google.fr/ [Mon Dec 08 10:37:24.057216 2025] [php:error] [pid 2727782] [client 104.22.18.13:10085] script '/var/www/html/info.php' not found or unable to stat, referer: https://www.google.de/ [Mon Dec 08 10:37:24.057216 2025] [php:error] [pid 2727782] [client 104.22.18.13:10085] script '/var/www/html/info.php' not found or unable to stat, referer: https://www.google.de/ [Mon Dec 08 10:37:27.357209 2025] [php:error] [pid 2727782] [client 104.22.18.13:10085] script '/var/www/html/buy.php' not found or unable to stat, referer: https://duckduckgo.com/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-07 08:07:51 (8 months ago)	[Sun Dec 07 09:07:45.368233 2025] [php:error] [pid 2608762] [client 104.22.18.13:14047] script '/var ... show more [Sun Dec 07 09:07:45.368233 2025] [php:error] [pid 2608762] [client 104.22.18.13:14047] script '/var/www/html/av.php' not found or unable to stat, referer: https://www.google.fr/ [Sun Dec 07 09:07:45.637519 2025] [php:error] [pid 2608762] [client 104.22.18.13:14047] script '/var/www/html/buy.php' not found or unable to stat, referer: https://www.google.de/ [Sun Dec 07 09:07:46.308541 2025] [php:error] [pid 2608762] [client 104.22.18.13:14047] script '/var/www/html/chosen.php' not found or unable to stat, referer: https://www.google.fr/ [Sun Dec 07 09:07:49.203095 2025] [php:error] [pid 2608762] [client 104.22.18.13:14047] script '/var/www/html/new.php' not found or unable to stat, referer: https://duckduckgo.com/ [Sun Dec 07 09:07:50.531132 2025] [php:error] [pid 2608762] [client 104.22.18.13:14047] script '/var/www/html/new.php' not found or unable to stat, referer: https://www.google.de/ ... show less	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇮🇷 185.226.118.222

🇺🇸 64.62.156.155

🇸🇾 185.225.41.192

🇩🇪 185.221.237.10

🇩🇪 185.220.101.178

🇩🇪 185.220.101.54

🇺🇸 107.175.183.32

🇸🇬 43.172.195.233

🇬🇧 35.203.210.24

🇷🇺 2a02:6b8:c42:dcc3:0:492c:72c9:0

🇺🇸 216.73.160.81

🇺🇸 206.170.5.79

🇲🇽 187.141.123.181

🇩🇪 185.220.101.175

🇩🇪 185.220.101.128

🇩🇪 185.220.101.110

🇸🇪 185.217.1.246

🇩🇪 167.94.146.34

🇨🇳 118.145.238.115