192.254.65.12

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
38% Elevated
9 reports
7 reporters · latest 1 day ago
ISP
Centrilogic, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS31863
Hostname(s)
generationscakes.com
Domain Name
centrilogic.com
Country
🇺🇸 United States of America
City
Lenoir, North Carolina
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
9 from 7 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇹🇼 Taiwan 3 🇩🇪 Germany 2 🇳🇱 Netherlands 2
Most common categories Hacking 4 Web App Attack 3 Exploited Host 2 DDoS Attack 1 VPN IP 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇼 tyetriiix
Wazuh Alert Evidence: Nov 08 12:59:25 ms1.triiix.info postfix/smtpd[1571402]: warning: hostname generationscakes.com does not resolve to address 192.254.65.12: Name or service not known
Hacking
🇹🇼 tyebstx
Wazuh Alert Evidence: Nov 08 12:28:55 ms1.bitstreetx.info postfix/smtpd[1915654]: warning: hostname generationscakes.com does not resolve to address 192.254.65.12: Name or service not known
Hacking
🇩🇪 satelliteproxy
DPI (Deep Packet Inspection) identified this source as an abusive automated web bot.
Bad Web Bot
🇹🇼 tyetriiix
Wazuh Alert Evidence: 2026/11/05 09:36:43 [error] 2825320#2825320: *5787 access forbidden by rule, client: 192.254.65.12, server: strapii.triiix.io, request: "GET / HTTP/1.1", host: "strapii.triiix.io"
Web App Attack
🇬🇧 Silly Development
Malicious activity detected from 31863 Centrilogic, Inc. towards host sillydev.co.uk (GET HTTP/2) @ 2026-11-03T21:27:31Z (8 occurrences)
DDoS Attack Exploited Host
🇳🇱 Site.eu
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
Hacking Web App Attack
🇹🇷 Jova
Part of a distributed password attack on a mail account (IMAP logins from many IPs).
Brute-Force
🇩🇪 GunsawianHosting
Open public proxy/relay
Open Proxy VPN IP Exploited Host
🇳🇱 Site.eu
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 194.54.88.249
🇩🇪 194.54.88.248
🇧🇷 189.28.245.99
🇵🇾 181.126.207.58
🇮🇱 130.185.96.113
🇰🇷 121.131.220.142
🇩🇪 109.160.32.106
🇷🇺 78.107.31.154
🇨🇦 51.222.31.2
🇸🇬 47.79.206.111
🇯🇵 43.130.245.80
🇹🇼 35.221.253.172
🇸🇬 181.215.50.171
🇧🇴 177.222.112.157
🇺🇸 173.56.204.115
🇺🇸 172.236.228.39
feedback