Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
This IP address has been reported a total of
13
times from
7 distinct
sources.
104.22.79.36 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
Belgium
with 4
reports;
Turkey
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
10
times;
Hacking
2
times;
Bad Web Bot
1
time;
Brute-Force
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Malicious HTTP HEAD request for '/dump.sql' (HTTP 403) from 104.22.79.36. Threat: Web Güvenlik Açığı ...
show moreMalicious HTTP HEAD request for '/dump.sql' (HTTP 403) from 104.22.79.36. Threat: Web Güvenlik Açığı Taraması (.env/bot). Blocked by WardenGuard Web Shield.
show less
Malicious HTTP GET request for '/db.sql' (HTTP 403) from 104.22.79.36. Threat: Web Exploit Probe. Bl ...
show moreMalicious HTTP GET request for '/db.sql' (HTTP 403) from 104.22.79.36. Threat: Web Exploit Probe. Blocked by WardenGuard Web Shield.
show less
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show moreWeb scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
Anonymous
[Thu Oct 22 01:11:40.285488 2026] [authz_core:error] [pid 25934] [client 104.22.79.36:10837] AH01630 ...
show more[Thu Oct 22 01:11:40.285488 2026] [authz_core:error] [pid 25934] [client 104.22.79.36:10837] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Oct 22 01:11:40.356456 2026] [authz_core:error] [pid 25934] [client 104.22.79.36:10837] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Oct 22 01:11:40.419059 2026] [authz_core:error] [pid 25934] [client 104.22.79.36:10837] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
[Mon Oct 19 23:46:43.868016 2026] [authz_core:error] [pid 6726] [client 104.22.79.36:12010] AH01630: ...
show more[Mon Oct 19 23:46:43.868016 2026] [authz_core:error] [pid 6726] [client 104.22.79.36:12010] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Oct 19 23:46:43.923855 2026] [authz_core:error] [pid 6726] [client 104.22.79.36:12010] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Oct 19 23:46:44.063835 2026] [authz_core:error] [pid 6726] [client 104.22.79.36:12010] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
{"level":"info","ts":1776848151.8700223,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1776848151.8700223,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"104.22.79.36","remote_port":"12464","client_ip":"104.22.79.36","proto":"HTTP/1.1","method":"GET","host":"status.jsbin.com","uri":"/tinyfilemanager.php","headers":{"X-Forwarded-Proto":["http"],"Insecure-Flag":["1"],"Cf-Ipcountry":["GB"],"Cf-Visitor":["{\"scheme\":\"http\"}"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"],"Cf-Ray":["9f036975080aef1f-HAM"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Connecting-Ip":["185.92.25.106"],"X-Forwarded-For":["185.92.25.106"]}},"bytes_read":0,"user_id":"","duration":0.000077578,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.jsbin.com/tinyfilemanager.php"],"Content-Type":[]}}
{"level":"info","ts":1776848154.2641158,"logger":"http.log.access.log1","msg":"hand
...
show less
DDoS Attack
Web App Attack
Showing 1 to
13
of 13 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
