Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
This IP address has been reported a total of
15
times from
8 distinct
sources.
104.22.23.19 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 6
reports;
Belgium
with 2
reports;
Brazil
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
9
times;
Brute-Force
8
times;
Bad Web Bot
6
times;
SSH
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show moreWeb scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
2026-10-06T04:39:37.120553+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[526404]: Failed password ...
show more2026-10-06T04:39:37.120553+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[526404]: Failed password for root from 104.22.23.19 port 53532 ssh2
2026-10-06T04:39:41.708640+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[526404]: Failed password for root from 104.22.23.19 port 53532 ssh2
2026-10-06T04:39:44.528521+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[526404]: Failed password for root from 104.22.23.19 port 53532 ssh2
...
show less
2026-09-24T02:46:41.621675+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2278488]: pam_unix(sshd: ...
show more2026-09-24T02:46:41.621675+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2278488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.22.23.19
2026-09-24T02:46:44.293902+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2278488]: Failed password for invalid user admin from 104.22.23.19 port 61595 ssh2
2026-09-24T02:55:25.501848+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2279699]: Invalid user admin from 104.22.23.19 port 60152
...
show less
[Mon May 25 11:45:20.447187 2026] [autoindex:error] [pid 1972035] [client 104.22.23.19:10319] AH0127 ...
show more[Mon May 25 11:45:20.447187 2026] [autoindex:error] [pid 1972035] [client 104.22.23.19:10319] AH01276: Cannot serve directory /var/www/fabiodirauso.it/.well-known/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm) found, and server-generated directory index forbidden by Options directive
...
show less
[Mon Dec 08 21:44:26.363488 2025] [php:error] [pid 2764751] [client 104.22.23.19:13918] script '/var ...
show more[Mon Dec 08 21:44:26.363488 2025] [php:error] [pid 2764751] [client 104.22.23.19:13918] script '/var/www/html/ee.php' not found or unable to stat, referer: https://www.google.de/
[Mon Dec 08 21:44:34.597027 2025] [php:error] [pid 2764575] [client 104.22.23.19:11985] script '/var/www/html/log.php' not found or unable to stat, referer: https://www.google.de/
[Mon Dec 08 21:44:35.103002 2025] [php:error] [pid 2764575] [client 104.22.23.19:11985] script '/var/www/html/m.php' not found or unable to stat, referer: https://www.bing.com/
[Mon Dec 08 21:44:35.351196 2025] [php:error] [pid 2764575] [client 104.22.23.19:11985] script '/var/www/html/mah.php' not found or unable to stat, referer: https://www.yahoo.com/
[Mon Dec 08 21:44:36.073172 2025] [php:error] [pid 2764575] [client 104.22.23.19:11985] script '/var/www/html/nxc.php' not found or unable to stat, referer: https://www.yahoo.com/
...
show less
Brute-Force
Web App Attack
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
