This IP address has been reported a total of
11
times from
5 distinct
sources.
104.22.195.131 was first reported on
October 9th 2026 , and the most recent report was
27 minutes ago United States of America
with 9
reports;
Belgium
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
10
times;
Brute-Force
8
times;
Bad Web Bot
5
times;
Email Spam
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
mnsf
2026-10-13 16:05:15
(27 minutes ago)
Abuse Detected (19)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-10-13 01:05:15
(15 hours ago)
Abuse Detected (13)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-10-12 15:05:21
(1 day ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 13:52:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 104.22.195.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.195.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:52:36.590655 2026] [security2:error] [pid 6479:tid 6479] [client 104.22.195.131:9793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bradjohnsonqh.com"] [uri "/.env.local"] [unique_id "aszmJNuYso43D-gkxXV13gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-12 12:05:15
(1 day ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 10:52:20
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 104.22.195.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.195.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 06:52:12.337990 2026] [security2:error] [pid 19784:tid 19784] [client 104.22.195.131:12804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blacktieokc.com"] [uri "/.htaccess"] [unique_id "asy73IPfy6LAN9nLLhQVJQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 08:40:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 104.22.195.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.195.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:40:28.072329 2026] [security2:error] [pid 1178:tid 1178] [client 104.22.195.131:9389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kircali.net"] [uri "/.htaccess"] [unique_id "asyc_IEjRB4B7kufzoMVYAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 12:54:22
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 104.22.195.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.195.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 08:54:16.619519 2026] [security2:error] [pid 31598:tid 31598] [client 104.22.195.131:13004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aikomp.net"] [uri "/.env.local"] [unique_id "aso1eMpJp5Ra1MB923dOGwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Jochen Pretli
2026-10-10 12:36:58
(3 days ago)
connection to honeypot
Email Spam
Port Scan
🇺🇸
almazick
2026-10-10 04:40:40
(3 days ago)
Fail2Ban jail window on srv1.windowrepair.us banned 104.22.195.131 after 1 attempts
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-09 16:06:11
(4 days ago)
Web App Attack
Showing 1 to
11
of 11 reports
