JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.222.174.122

104.222.174.122 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 18%: ?

18%

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	fastplanet.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.222.174.122

Whois 104.222.174.122

IP Abuse Reports for 104.222.174.122:

This IP address has been reported a total of 13 times from 10 distinct sources. 104.222.174.122 was first reported on April 15th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-10-16 07:18:31 (6 days ago)	[Fri Oct 16 14:18:29.685667 2026] [security2:error] [pid 62542:tid 140319718889152] [client 104.222. ... show more [Fri Oct 16 14:18:29.685667 2026] [security2:error] [pid 62542:tid 140319718889152] [client 104.222.174.122:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "atHPxVGJ_6UN2IxfJloYkwAAAEM"], referer https://www.bmkg.go.id/ [sta ... show less	Email Spam Hacking
Anonymous	2026-09-12 07:36:02 (1 month ago)	WEB attack	Brute-Force
Anonymous	2026-09-01 15:25:32 (1 month ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇺🇸 kosada.com	2026-08-25 07:38:07 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-29 07:47:00 (2 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-07-29 07:47:00 (2 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-07-16 08:11:00 (3 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇦🇺 prologic	2026-06-12 20:45:36 (4 months ago)	Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ... show more Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool. show less	DDoS Attack Web App Attack
🇪🇸 el-brujo	2026-06-11 08:20:19 (4 months ago)	Cloudflare WAF: Request Path: /whois.html Request Query: ?domain=vr.vex.com Host: www.elhacker.net u ... show more Cloudflare WAF: Request Path: /whois.html Request Query: ?domain=vr.vex.com Host: www.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: block Source: firewallCustom ASN Description: M247 Europe SRL Country: SE Method: GET Timestamp: 2026-06-11T08:20:19Z ruleId: e0f7651b58dd41e1a2c1c3a9baa3c439. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇮🇹 A000Z	2026-06-07 04:08:37 (4 months ago)	Fail2Ban: 104.222.174.122 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 104.222.174.122 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇦🇺 MAGIC	2026-06-07 00:08:28 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-30 14:16:19 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 104.222.174.122 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 104.222.174.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 10:16:13.577614 2026] [security2:error] [pid 28732:tid 28732] [client 104.222.174.122:56234] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com:443\|F\|2"] [data ".pqbj.med-engineering.com.yyn.cs"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/ifl.pqbj.med-engineering.com.yyn.cs"] [unique_id "ahrxLQzytA5PuHdbwUMB6QAAAAs"], referer: https://www.med-engineering.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-04-15 07:40:22 (6 months ago)	tcp/443 (8 or more attempts)	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 172.96.88.142

🇮🇳 103.6.133.241

🇸🇬 98.159.41.6

🇩🇪 23.132.164.70

🇰🇷 175.203.201.109

🇫🇮 147.185.133.28

🇹🇷 78.135.111.65

🇰🇷 218.234.186.2

🇰🇷 211.104.198.147

🇩🇪 167.94.145.27

🇩🇪 109.160.32.32

🇮🇷 109.94.165.70

🇳🇬 105.127.15.22

🇫🇷 83.192.25.148

🇳🇱 192.42.116.109

🇺🇸 158.41.234.146

🇭🇰 156.225.1.99

🇯🇵 153.177.144.32

🇩🇪 151.243.11.208

🇻🇳 113.161.79.218