JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.23.225.144

104.23.225.144 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 104.23.225.144 is an IP address from within our whitelist belonging to the subnet 104.16.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 104.23.225.144

Whois 104.23.225.144

IP Abuse Reports for 104.23.225.144:

This IP address has been reported a total of 16 times from 12 distinct sources. 104.23.225.144 was first reported on July 11th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 chengkev	2026-06-02 11:10:24 (2 days ago)	Esta IP fue detectada por CrowdSec, activando crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-04-15 14:59:38 (1 month ago)	Aggressive web scan	Web App Attack
🇧🇾 lns.bz	2026-03-12 06:53:59 (2 months ago)	.env scanning [BY]	Web App Attack
🇫🇷 Campus France	2026-02-04 15:50:01 (4 months ago)	[Wed Feb 04 16:50:00.602147 2026] [php:error] [pid 2992963] [client 104.23.225.144:11305] script '/v ... show more [Wed Feb 04 16:50:00.602147 2026] [php:error] [pid 2992963] [client 104.23.225.144:11305] script '/var/www/html/php-info.php' not found or unable to stat [Wed Feb 04 16:50:00.641064 2026] [php:error] [pid 2992963] [client 104.23.225.144:11305] script '/var/www/html/newinfo.php' not found or unable to stat [Wed Feb 04 16:50:00.668346 2026] [php:error] [pid 2992963] [client 104.23.225.144:11305] script '/var/www/html/siteinfo.php' not found or unable to stat [Wed Feb 04 16:50:00.757138 2026] [php:error] [pid 2992963] [client 104.23.225.144:11305] script '/var/www/html/pageinfo.php' not found or unable to stat [Wed Feb 04 16:50:00.838063 2026] [php:error] [pid 2992963] [client 104.23.225.144:11305] script '/var/www/html/release_info.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇳🇱 ReporTR	2026-02-01 01:14:21 (4 months ago)	Repeated malicious activity detected by Fail2Ban jail 'plesk-modsecurity'. TCP connection completed. ... show more Repeated malicious activity detected by Fail2Ban jail 'plesk-modsecurity'. TCP connection completed. IP banned. show less	Hacking Web App Attack
🇷🇸 iphouse	2026-01-21 22:30:03 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-apache jail	Web App Attack
🇸🇬 Fn4ticHz	2025-12-16 13:51:47 (5 months ago)	repeated ddos targeted load.rapidreset.net -- ZeroGuard	DDoS Attack
🇫🇷 Campus France	2025-12-09 08:42:40 (5 months ago)	[Mon Dec 08 01:13:40.264689 2025] [php:error] [pid 2661009] [client 104.23.225.144:10609] script '/v ... show more [Mon Dec 08 01:13:40.264689 2025] [php:error] [pid 2661009] [client 104.23.225.144:10609] script '/var/www/html/wp-editor.php' not found or unable to stat, referer: https://duckduckgo.com/ [Mon Dec 08 15:08:42.357547 2025] [php:error] [pid 2743657] [client 104.23.225.144:11981] script '/var/www/html/api.php' not found or unable to stat, referer: https://www.bing.com/ [Mon Dec 08 19:29:24.876161 2025] [php:error] [pid 2757944] [client 104.23.225.144:14315] script '/var/www/html/fm.php' not found or unable to stat [Tue Dec 09 09:42:35.608777 2025] [php:error] [pid 2839973] [client 104.23.225.144:13387] script '/var/www/html/ahax.php' not found or unable to stat, referer: https://www.google.com/ [Tue Dec 09 09:42:39.983304 2025] [php:error] [pid 2839973] [client 104.23.225.144:13387] script '/var/www/html/core.php' not found or unable to stat, referer: https://www.google.com/ ... show less	Brute-Force Web App Attack
🇧🇷 leolemos	2025-09-18 23:25:24 (8 months ago)	[Thu Sep 18 20:25:22.684150 2025] [proxy_fcgi:error] [pid 1883748] [client 104.23.225.144:33274] AH0 ... show more [Thu Sep 18 20:25:22.684150 2025] [proxy_fcgi:error] [pid 1883748] [client 104.23.225.144:33274] AH01071: Got error 'Primary script unknown' [Thu Sep 18 20:25:22.845804 2025] [proxy_fcgi:error] [pid 1883748] [client 104.23.225.144:33274] AH01071: Got error 'Primary script unknown' [Thu Sep 18 20:25:23.022470 2025] [proxy_fcgi:error] [pid 1883748] [client 104.23.225.144:33274] AH01071: Got error 'Primary script unknown' show less	Brute-Force Web App Attack
🇬🇧 pinguin	2025-09-13 14:42:43 (8 months ago)	Triggered Cloudflare WAF (firewallManaged) from FR. Action taken: LOG Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallManaged) from FR. Action taken: LOG Protocol: HTTP/2 (GET method) Endpoint: / UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-08-24 13:52:54 (9 months ago)	[Sun Aug 24 15:52:53.180938 2025] [authz_core:error] [pid 25193] [client 104.23.225.144:44214] AH016 ... show more [Sun Aug 24 15:52:53.180938 2025] [authz_core:error] [pid 25193] [client 104.23.225.144:44214] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Aug 24 15:52:53.485741 2025] [authz_core:error] [pid 25193] [client 104.23.225.144:44214] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Aug 24 15:52:53.676505 2025] [authz_core:error] [pid 25193] [client 104.23.225.144:44214] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2025-08-17 15:45:27 (9 months ago)	[Sun Aug 17 17:45:26.076739 2025] [authz_core:error] [pid 13009] [client 104.23.225.144:44592] AH016 ... show more [Sun Aug 17 17:45:26.076739 2025] [authz_core:error] [pid 13009] [client 104.23.225.144:44592] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Aug 17 17:45:26.099562 2025] [authz_core:error] [pid 13009] [client 104.23.225.144:44592] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Aug 17 17:45:26.122601 2025] [authz_core:error] [pid 13009] [client 104.23.225.144:44592] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-08-05 07:04:29 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.23.225.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.225.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 03:04:22.274407 2025] [security2:error] [pid 29219:tid 29219] [client 104.23.225.144:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.webuildbeaches.com"] [uri "/.git/info/"] [unique_id "aJGs9sg1gQF5VahBseM2oQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-31 05:29:31 (10 months ago)	[Thu Jul 31 07:29:29.792937 2025] [authz_core:error] [pid 7381] [client 104.23.225.144:36596] AH0163 ... show more [Thu Jul 31 07:29:29.792937 2025] [authz_core:error] [pid 7381] [client 104.23.225.144:36596] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Jul 31 07:29:29.863241 2025] [authz_core:error] [pid 7381] [client 104.23.225.144:36596] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Jul 31 07:29:29.915732 2025] [authz_core:error] [pid 7381] [client 104.23.225.144:36596] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2025-07-27 03:32:05 (10 months ago)	[Sun Jul 27 05:32:04.353194 2025] [authz_core:error] [pid 18517] [client 104.23.225.144:41328] AH016 ... show more [Sun Jul 27 05:32:04.353194 2025] [authz_core:error] [pid 18517] [client 104.23.225.144:41328] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jul 27 05:32:04.381502 2025] [authz_core:error] [pid 18517] [client 104.23.225.144:41328] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jul 27 05:32:04.409103 2025] [authz_core:error] [pid 18517] [client 104.23.225.144:41328] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 172.110.221.82

🇫🇷 167.86.121.13

🇷🇴 102.129.186.87

🇺🇸 100.29.192.90

🇺🇸 100.29.192.41

🇩🇪 92.119.166.73

🇫🇷 31.59.105.179

🇬🇧 185.91.69.167

🇸🇬 148.66.132.204

🇨🇦 89.251.0.12

🇨🇦 20.220.200.248

🇨🇦 4.205.28.179

🇬🇷 2620:171:ce::234

🇫🇮 193.233.112.95

🇧🇷 177.104.171.149

🇩🇪 167.94.146.44

🇫🇷 91.231.89.73

🇧🇬 79.124.62.134

🇺🇸 34.174.2.92

🇩🇪 141.11.45.234