JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.22.56.185

104.22.56.185

Neutral Activity Whitelisted Subnet

22 reports found in our database

0% Low Risk

Abuse confidence score ?

104.22.56.185 is an IP address from within our whitelist belonging to the subnet 104.16.0.0/13, which we identify as "Cloudflare Reverse Proxy".

ISP

Cloudflare, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS13335

Domain Name

cloudflare.com

Country

🇺🇸 United States of America

City

Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.22.56.185:

This IP address has been reported a total of 22 times from 13 distinct sources. 104.22.56.185 was first reported on March 6th 2024, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 5 reports; United States of America with 3 reports; Bulgaria with 2 reports. The most common categories in these recent reports were: Web App Attack 12 times; Brute-Force 4 times; Hacking 3 times; Bad Web Bot 3 times; SSH 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 Stoyko Stoykov	2026-08-28 10:16:50 (1 day ago)	104.22.56.185 - - [28/Aug/2026:13:16:49 +0300] "GET /.env.backup HTTP/2.0" 404 134 "-" "crusader-wor ... show more 104.22.56.185 - - [28/Aug/2026:13:16:49 +0300] "GET /.env.backup HTTP/2.0" 404 134 "-" "crusader-worker/1.0" ... show less	Hacking Web App Attack
Anonymous	2026-08-27 10:25:20 (2 days ago)	[Thu Aug 27 12:25:19.044042 2026] [authz_core:error] [pid 30795] [client 104.22.56.185:11541] AH0163 ... show more [Thu Aug 27 12:25:19.044042 2026] [authz_core:error] [pid 30795] [client 104.22.56.185:11541] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Aug 27 12:25:19.044296 2026] [authz_core:error] [pid 30830] [client 104.22.56.185:11553] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Aug 27 12:25:19.056315 2026] [authz_core:error] [pid 30791] [client 104.22.56.185:11547] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-08-26 14:59:58 (3 days ago)	[Wed Aug 26 16:59:56.968429 2026] [authz_core:error] [pid 6399] [client 104.22.56.185:11354] AH01630 ... show more [Wed Aug 26 16:59:56.968429 2026] [authz_core:error] [pid 6399] [client 104.22.56.185:11354] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Aug 26 16:59:57.105873 2026] [authz_core:error] [pid 6399] [client 104.22.56.185:11354] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Aug 26 16:59:57.269775 2026] [authz_core:error] [pid 6399] [client 104.22.56.185:11354] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-08-12 14:56:33 (2 weeks ago)	[Wed Aug 12 16:56:28.241571 2026] [authz_core:error] [pid 7518] [client 104.22.56.185:10636] AH01630 ... show more [Wed Aug 12 16:56:28.241571 2026] [authz_core:error] [pid 7518] [client 104.22.56.185:10636] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Aug 12 16:56:31.984645 2026] [authz_core:error] [pid 7570] [client 104.22.56.185:10642] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Aug 12 16:56:32.001265 2026] [authz_core:error] [pid 7574] [client 104.22.56.185:10647] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-11 04:09:26 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.22.56.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.22.56.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 00:09:14.560260 2026] [security2:error] [pid 6562:tid 6562] [client 104.22.56.185:10142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyclelytz.com.indie100.com"] [uri "/.env.production"] [unique_id "anqgav0MHs95ASifySVO8wAAABE"], referer: https://www.google.com/search?q=cyclelytz.com.indie100.com show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-08-09 12:54:18 (2 weeks ago)		Web App Attack
Anonymous	2026-08-08 22:29:27 (2 weeks ago)	[Sun Aug 09 00:28:53.326653 2026] [authz_core:error] [pid 4273] [client 104.22.56.185:11599] AH01630 ... show more [Sun Aug 09 00:28:53.326653 2026] [authz_core:error] [pid 4273] [client 104.22.56.185:11599] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.com/search?q=antler-snacks.com [Sun Aug 09 00:29:04.612269 2026] [authz_core:error] [pid 2963] [client 104.22.56.185:10794] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Aug 09 00:29:26.518478 2026] [authz_core:error] [pid 3506] [client 104.22.56.185:13132] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.com/search?q=antler-snacks.com ... show less	Web App Attack
🇧🇬 Stoyko Stoykov	2026-08-03 03:58:41 (3 weeks ago)	104.22.56.185 - - [03/Aug/2026:06:58:39 +0300] "GET /.env.old HTTP/2.0" 404 134 "-" "crusader-worker ... show more 104.22.56.185 - - [03/Aug/2026:06:58:39 +0300] "GET /.env.old HTTP/2.0" 404 134 "-" "crusader-worker/1.0" ... show less	Hacking Web App Attack
Anonymous	2026-08-01 04:32:58 (4 weeks ago)	[Sat Aug 01 06:32:45.110598 2026] [authz_core:error] [pid 5176] [client 104.22.56.185:9881] AH01630: ... show more [Sat Aug 01 06:32:45.110598 2026] [authz_core:error] [pid 5176] [client 104.22.56.185:9881] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.com/search?q=antler-snacks.com [Sat Aug 01 06:32:54.657473 2026] [authz_core:error] [pid 5177] [client 104.22.56.185:9408] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Aug 01 06:32:56.856294 2026] [authz_core:error] [pid 5177] [client 104.22.56.185:9408] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.com/search?q=antler-snacks.com ... show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-29 22:02:56 (4 weeks ago)	Auto-ban: >3000 req/min op 2026-07-29	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-29 17:59:50 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.22.56.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.22.56.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 13:59:42.928961 2026] [security2:error] [pid 3806970:tid 3806970] [client 104.22.56.185:13418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiireservations.com"] [uri "/.git/config"] [unique_id "amo_jhFqtkU4UB5py9cshwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 15:06:45 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 104.22.56.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.22.56.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 11:06:40.846721 2026] [security2:error] [pid 2200562:tid 2200562] [client 104.22.56.185:13989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myairbalance.org"] [uri "/.env.dist"] [unique_id "amoXAGg2bQ-4JhYUo_yd0AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-29 05:58:35 (1 month ago)	104.22.56.185 - - [28/Jul/2026:22:58:35 -0700] "GET /template/css/style.css HTTP/1.1" 200 52260 "htt ... show more 104.22.56.185 - - [28/Jul/2026:22:58:35 -0700] "GET /template/css/style.css HTTP/1.1" 200 52260 "https://northcoastagency.ltcglobal.com/login" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Googlebot/2.1; +http://www.google.com/bot.html) Chrome/150.0.7871.124 Safari/537.36" ... show less	Brute-Force SSH
Anonymous	2026-05-30 04:18:02 (2 months ago)	[Sat May 30 06:18:01.553400 2026] [authz_core:error] [pid 8434] [client 104.22.56.185:14297] AH01630 ... show more [Sat May 30 06:18:01.553400 2026] [authz_core:error] [pid 8434] [client 104.22.56.185:14297] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat May 30 06:18:01.792350 2026] [authz_core:error] [pid 8434] [client 104.22.56.185:14297] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat May 30 06:18:02.179259 2026] [authz_core:error] [pid 8434] [client 104.22.56.185:14297] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇬🇧 sandra361	2026-05-28 07:07:01 (3 months ago)	Port scan detected: 19 attempts across 1 ports (443). \| Evidence: REAPER_TARPIT:IN=enp1s0f0 OUT= SRC ... show more Port scan detected: 19 attempts across 1 ports (443). \| Evidence: REAPER_TARPIT:IN=enp1s0f0 OUT= SRC=104.22.56.185 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=10210 DF PROTO=TCP SPT=43471 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:537:1000:def:f44a:3358:9043

🇰🇷 211.228.91.157

🇻🇪 190.75.248.87

🇨🇳 117.85.17.214

🇳🇱 45.148.10.240

🇭🇰 219.73.79.33

🇸🇬 207.166.168.11

🇵🇱 188.147.254.153

🇧🇷 177.43.105.11

🇰🇷 175.213.137.209

🇺🇸 172.104.30.37

🇺🇸 91.230.168.146

🇨🇭 89.145.167.224

🇺🇸 40.124.114.72

🇺🇸 195.184.76.48

🇺🇸 165.154.182.207

🇱🇺 158.64.32.133

🇸🇬 156.240.235.180

🇦🇫 149.54.62.114

🇺🇸 136.29.52.7