This IP address has been reported a total of
10
times from
7 distinct
sources.
104.222.169.215 was first reported on
, and the most recent report was
.
In the last 60 days, the only reporter location was:
Indonesia
with 1
report.
The most common categories in these recent reports were:
Hacking
1
time;
Email Spam
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ...
show moreL7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /18-velo-route | query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Taille-S-XL-51/Marque-Orbea&resultsPerPage=
show less
Fail2Ban: 104.222.169.215 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ...
show moreFail2Ban: 104.222.169.215 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.1391.1031 Safari/537.36
show less
Fail2Ban: 104.222.169.215 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ...
show moreFail2Ban: 104.222.169.215 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.7517.1446 Safari/537.36
show less
Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ...
show moreCoordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool.
show less
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/customer/account/login/referer/aHR ...
show moreRequests denied due to proxy/VPN risk (tenant=82 method=GET path=/customer/account/login/referer/aHR0cHM6Ly91bW5pdHphLmNvbS9jYXRhbG9nL3Byb2R1Y3Qvdmlldy9pZC8xMDc3LyNyZXZpZXctZm9ybQ~~/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.10 Safari/605.1.1')
show less
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/04-10-cls-class-w219-4dr-sedan-l-s ...
show moreRequests denied due to proxy/VPN risk (tenant=82 method=GET path=/04-10-cls-class-w219-4dr-sedan-l-style-roof-spoiler-painted-pewter-metallic-723.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0')
show less
Open Proxy
VPN IP
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
