104.23.217.12

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Whitelisted Subnet

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Abuse Confidence Score
0% Low Risk
128 reports
46 reporters · latest 42 minutes ago

104.23.217.12 is on our whitelist as Cloudflare Reverse Proxy via the subnet 104.16.0.0/13.

ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇸🇪 Sweden
City
Stockholm, Stockholm
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
128 from 46 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 15 🇧🇪 Belgium 5 🇳🇱 Netherlands 2
Most common categories Web App Attack 25 Bad Web Bot 20 Brute-Force 7 Port Scan 2 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Cloudflare Reverse Proxy. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 craudiovizai
Automated honeypot detection. blocked ip against a Next.js application. Paths: /wp-admin/install.php?step=1. Blocked at the edge.
Bad Web Bot
🇧🇪 madeit
Web App Attack
🇺🇸 craudiovizai
Automated honeypot detection. blocked ip against a Next.js application. Paths: /wp-admin/install.php?step=1. Blocked at the edge.
Bad Web Bot
🇺🇸 craudiovizai
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack Bad Web Bot
🇺🇸 craudiovizai
Automated honeypot detection. blocked ip against a Next.js application. Paths: /wp-admin/install.php, /wp-admin/install.php?step=1. Blocked at the edge.
Bad Web Bot
🇺🇸 craudiovizai
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack Bad Web Bot
🇧🇷 borbolla
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /wp-admin/install.php?step=1 HTTP/2.0"
Web App Attack Bad Web Bot
🇺🇸 craudiovizai
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack Bad Web Bot
🇨🇦 webemsegundos
Web vulnerability scanner: 1 probe paths (e.g. /wp-admin/install.php). Blocked by WeS Firewall.
Bad Web Bot Web App Attack
🇫🇷 vtchost.com
forbidden http request, scanning for weaknesses ...
Web App Attack
🇧🇪 madeit
Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇺🇸 craudiovizai
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇺🇸 gbutiri
Automated report: source IP probed nonexistent .php paths on our web server (vulnerability scanning / bad bot).
Web App Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 223.197.226.51
🇺🇸 162.216.149.106
🇮🇳 103.77.127.194
🇺🇸 50.6.200.157
🇨🇳 47.99.94.130
🇸🇬 47.79.51.136
🇧🇪 35.210.227.34
🇹🇭 27.130.112.250
🇰🇷 221.167.50.229
🇺🇸 207.45.5.86
🇩🇪 195.182.16.183
🇨🇳 182.244.5.153
🇹🇭 159.192.137.133
🇺🇸 68.15.129.40
🇸🇬 47.82.8.202
🇬🇧 35.203.211.115
🇬🇧 35.203.211.80
🇩🇪 165.154.164.79
🇷🇺 78.138.168.46
🇨🇳 59.173.89.0
feedback