JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.21.68.166

104.21.68.166 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Content Delivery Network
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 104.21.68.166 is an IP address from within our whitelist belonging to the subnet 104.16.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 104.21.68.166

Whois 104.21.68.166

IP Abuse Reports for 104.21.68.166:

This IP address has been reported a total of 7 times from 3 distinct sources. 104.21.68.166 was first reported on July 24th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-04-17 13:47:34 (1 month ago)	Blocked by UFW (TCP on 46972) Source port: 2083 TTL: 61 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 46972) Source port: 2083 TTL: 61 Packet length: 40 TOS: 0x00 This report (for 104.21.68.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-30 00:24:40 (2 months ago)	Blocked by UFW (TCP on 44064) Source port: 2083 TTL: 55 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 44064) Source port: 2083 TTL: 55 Packet length: 40 TOS: 0x08 This report (for 104.21.68.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-29 05:12:42 (2 months ago)	Blocked by UFW (TCP on 53292) Source port: 2083 TTL: 55 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 53292) Source port: 2083 TTL: 55 Packet length: 40 TOS: 0x08 This report (for 104.21.68.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-27 15:57:31 (2 months ago)	Blocked by UFW (TCP on 50862) Source port: 2083 TTL: 55 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 50862) Source port: 2083 TTL: 55 Packet length: 40 TOS: 0x08 This report (for 104.21.68.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-27 02:35:18 (2 months ago)	Blocked by UFW (TCP on 48392) Source port: 2083 TTL: 55 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 48392) Source port: 2083 TTL: 55 Packet length: 40 TOS: 0x08 This report (for 104.21.68.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 PPW	2025-06-16 12:20:00 (11 months ago)	useless shit ... / https://dabce.com/invoice/f…	Phishing Email Spam Port Scan Hacking Spoofing
Anonymous	2022-07-24 18:19:38 (3 years ago)	Spoofing: Dick's Sporting Goods – reward fraud From: YETI Hopper M20 Cooler Confirmation <contact@s ... show more Spoofing: Dick's Sporting Goods – reward fraud From: YETI Hopper M20 Cooler Confirmation <[email protected]> Received: from 195.154.63.194 (EHLO suntczrou.operanikomlk.live) Scaleway Header operanikomlk.live = 51.159.67.169 Scaleway Repetitive message URL vazlinokhgr.co = 208.115.223.99 Limestone Networks – redirects: - urgentuslime.com = 172.99.173.210 Baxet Group Inc - xonicxjump.com = 104.21.68.166, 172.67.196.229 Cloudflare - landing: volcanismrise.com = 104.21.71.207, 172.67.171.162 Cloudflare - trk-praesentium.com = 104.21.65.100, 172.67.165.74 Cloudflare - a.mgid.com = 104.19.132.78, ... 104.19.136.78 Cloudflare - event.trk-praesentium.com = 104.21.65.180, 172.67.165.74 Cloudflare Reward fraud message URL redirect: "volcanismrise.com is a survey service…" - previous phishing surveys: CREDENTALISM.COM, OMNITERACE.COM, PAVILIONSNOT.COM, LOCOMOTORYTEE.COM, VOTARYFQUANT.COM, quayretainer.com, XYLITROLWATER.COM - click tracking - fake testimonials show less	Fraud Orders Phishing Web Spam Email Spam Spoofing Bad Web Bot Exploited Host

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.192

🇲🇽 186.96.145.241

🇬🇧 185.247.137.64

🇺🇸 185.223.152.198

🇺🇸 184.105.139.74

🇸🇪 155.4.244.169

🇮🇩 89.21.85.28

🇺🇸 45.56.82.11

🇵🇪 38.225.32.124

🇺🇸 20.51.234.214

🇺🇸 13.89.124.219

🇺🇸 13.89.124.209

🇨🇳 223.109.252.176

🇨🇳 223.109.252.149

🇱🇻 188.92.77.12

🇺🇸 147.185.132.197

🇦🇴 105.174.17.50

🇫🇷 91.231.89.85

🇺🇸 50.116.72.209

🇺🇸 195.184.76.83