JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.21.76.217

104.21.76.217 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Content Delivery Network
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 104.21.76.217 is an IP address from within our whitelist belonging to the subnet 104.16.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 104.21.76.217

Whois 104.21.76.217

IP Abuse Reports for 104.21.76.217:

This IP address has been reported a total of 18 times from 11 distinct sources. 104.21.76.217 was first reported on October 18th 2023, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ISPLtd	2026-01-06 09:25:33 (5 months ago)	Jan 6 01:40:11 104.21.76.217 TCP SPT=80 DPT=10658 SYN Jan 6 01:40:12 104.21.76.217 TCP SPT=80 DPT= ... show more Jan 6 01:40:11 104.21.76.217 TCP SPT=80 DPT=10658 SYN Jan 6 01:40:12 104.21.76.217 TCP SPT=80 DPT=10658 SYN Jan 6 02:25:32 104.21.76.217 TCP SPT=80 DPT=18952 ... show less	Port Scan
🇩🇪 403veli	2026-01-06 09:15:01 (5 months ago)	Confirmed malicious activity observed via T-Pot honeypot Observed 1 events on port 43333 (flow) from ... show more Confirmed malicious activity observed via T-Pot honeypot Observed 1 events on port 43333 (flow) from 2026-01-06T09:15:01.717000+00:00 to 2026-01-06T09:15:01.717000+00:00. Sample: {"src_port": 80, "src_ip": "104.21.76.217", "dest_port": 43333, "event_type": "flow"} show less	Exploited Host
🇺🇸 anon333	2026-01-06 08:33:10 (5 months ago)	Hacker syslog review 1767688390	Hacking
🇨🇭 Elysium Security	2026-01-06 08:21:07 (5 months ago)	Mass port scanning on a whole network	Port Scan
🇩🇪 marcel-knorr.de	2026-01-06 08:18:51 (5 months ago)	[MK-VM4] Blocked by UFW	Port Scan Brute-Force
🇫🇷 ISPLtd	2026-01-06 08:13:01 (5 months ago)	Jan 6 02:48:52 104.21.76.217 TCP SPT=80 DPT=47265 SYN Jan 6 02:48:53 104.21.76.217 TCP SPT=80 DPT= ... show more Jan 6 02:48:52 104.21.76.217 TCP SPT=80 DPT=47265 SYN Jan 6 02:48:53 104.21.76.217 TCP SPT=80 DPT=47265 SYN Jan 6 04:13:01 104.21.76.217 TCP SPT=80 DPT=13945 ... show less	Port Scan
🇺🇸 ISPLtd	2026-01-06 07:47:20 (5 months ago)	Jan 6 03:32:45 104.21.76.217 TCP SPT=80 DPT=36885 SYN Jan 6 03:32:46 104.21.76.217 TCP SPT=80 DPT= ... show more Jan 6 03:32:45 104.21.76.217 TCP SPT=80 DPT=36885 SYN Jan 6 03:32:46 104.21.76.217 TCP SPT=80 DPT=36885 SYN Jan 6 03:47:20 104.21.76.217 TCP SPT=80 DPT=48603 ... show less	Port Scan
🇩🇪 marcel-knorr.de	2026-01-06 07:46:18 (5 months ago)	[MK-VM6] Blocked by UFW	Port Scan Brute-Force
Anonymous	2026-01-06 07:09:56 (5 months ago)	Jan 6 02:09:55 localhost kernel: [96029002.031811] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91 ... show more Jan 6 02:09:55 localhost kernel: [96029002.031811] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=104.21.76.217 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=TCP SPT=80 DPT=16289 WINDOW=65535 RES=0x00 ACK SYN URGP=0 Jan 6 02:09:55 localhost kernel: [96029002.031840] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=104.21.76.217 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=TCP SPT=80 DPT=16289 SEQ=2109451698 ACK=3619647028 WINDOW=65535 RES=0x00 ACK SYN URGP=0 OPT (020405780402080AF6639455358309270103030D) Jan 6 02:09:56 localhost kernel: [96029003.041049] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=104.21.76.217 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=TCP SPT=80 DPT=16289 WINDOW=65535 RES=0x00 ACK SYN URGP=0 Jan 6 02:09:56 localhost kernel: [96029003.041057] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0: show less	Port Scan
🇺🇸 ISPLtd	2026-01-06 07:07:05 (5 months ago)	Jan 6 03:06:38 104.21.76.217 TCP SPT=80 DPT=27185 SYN Jan 6 03:06:39 104.21.76.217 TCP SPT=80 DPT= ... show more Jan 6 03:06:38 104.21.76.217 TCP SPT=80 DPT=27185 SYN Jan 6 03:06:39 104.21.76.217 TCP SPT=80 DPT=27185 SYN Jan 6 03:06:58 104.21.76.217 TCP SPT=80 DPT=27185 SYN ... show less	Port Scan
🇫🇷 ISPLtd	2026-01-06 06:41:01 (5 months ago)	Jan 6 02:37:04 104.21.76.217 TCP SPT=80 DPT=24191 SYN Jan 6 02:37:05 104.21.76.217 TCP SPT=80 DPT= ... show more Jan 6 02:37:04 104.21.76.217 TCP SPT=80 DPT=24191 SYN Jan 6 02:37:05 104.21.76.217 TCP SPT=80 DPT=24191 SYN Jan 6 02:41:00 104.21.76.217 TCP SPT=80 DPT=24191 ... show less	Port Scan
Anonymous	2026-01-06 05:45:05 (5 months ago)	Port Scan	Port Scan
🇬🇧 Andrew	2026-01-06 05:05:48 (5 months ago)	Blocked by UFW (TCP on port 19649). Source port: 80 TTL: 56 Packet length: 60 TOS: 0x04 This report ... show more Blocked by UFW (TCP on port 19649). Source port: 80 TTL: 56 Packet length: 60 TOS: 0x04 This report (for 104.21.76.217) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 ISPLtd	2026-01-06 04:28:03 (5 months ago)	Jan 5 21:27:59 104.21.76.217 TCP SPT=80 DPT=32007 SYN Jan 5 21:28:01 104.21.76.217 TCP SPT=80 DPT= ... show more Jan 5 21:27:59 104.21.76.217 TCP SPT=80 DPT=32007 SYN Jan 5 21:28:01 104.21.76.217 TCP SPT=80 DPT=32007 SYN Jan 5 21:28:02 104.21.76.217 TCP SPT=80 DPT=32007 ... show less	Port Scan
🇺🇸 xmission.com	2026-01-06 04:25:13 (5 months ago)	Blocked by UFW (TCP on 43757) Source port: 80 TTL: 47 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 43757) Source port: 80 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 104.21.76.217) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 2406:da19:776:6e02:ad3d:661d:35a0:dc12

🇨🇳 218.21.250.151

🇳🇱 192.109.200.220

🇨🇳 180.105.9.154

🇺🇸 66.132.186.221

🇺🇸 216.239.32.223

🇺🇸 172.212.200.96

🇹🇼 110.25.105.240

🇺🇸 104.237.244.177

🇻🇳 103.200.22.154

🇫🇷 85.217.140.4

🇩🇪 69.5.169.166

🇺🇸 47.251.74.190

🇺🇸 43.135.135.17

🇸🇳 41.83.63.190

🇧🇪 35.187.23.170

🇨🇳 14.18.139.20

🇧🇷 187.12.48.70

🇨🇦 85.217.149.58

🇧🇪 35.205.57.27