104.244.72.115 Location, Reputation, and Bot results

F
The IP address 104.244.72.115 is very high risk and with an F grade should be blocked from accessing your site.
Summary
Country Luxembourg
Bot Activity Yes
Cloaking Yes
Reputation On 14 lists
Type Proxy
Provider Quetzalcoatl Relays: Quetzalcoatl runs hundreds of Tor relays
Network Neighborhood

A scan of the IPs surrounding your target IP of 104.244.72.115.

Starting at 104.244.72.1 and ending at 104.244.72.254.

KEY: (B)ot, (T)or, (V)PN, (P)roxy, (S)pider

Warning 9% bad hosts found.

24 of 254 host IPs were found to have engaged in bot activity or are running cloaking software in this network block.

This is a sign that the owner of this block may not taking the necessary steps to stop threat actors from using their systems.

Autonomous System (Owner)
Name PONYNET, US
Number 53667
Established 2014 (9 years ago)
Domains
  • frantech.ca
Provider
Name Quetzalcoatl Relays: Quetzalcoatl runs hundreds of Tor relays
Website https://quetzalcoat...
Type Proxy
IP Geolocation
Continent Eu
Lat/Long 49.61154 / 6.130018
Country Luxembourg
Region Luxembourg
City Luxembourg
TZ Offset +01:00 GMT
TZ Name Central European Standard Time (CET)
Currency EUR
Live Information
Launch Probe 104.244.72.115

Real-time detection of behaviors that indicate bot, proxy and VPN cloaking on the host IP address. Highest accuracy.

Completes in ~15 seconds.

IP Cloaking Information
Is Tor Yes
Is VPN -
Is Proxy -
Bot Detection Info
Is Bot Yes
Categories Bot, Exploit Bot, Spam Bot, Tor
Is Malware -
Is Hijacked -
Is Exploit Bot Yes
Is Spider -
Is Dshield -
Is Spyware -
Last Seen 2023-11-28 09:30:48 UTC
Wafris Waitlist Signup

Go beyond lookups. Identify dark traffic hitting your site and block it before attacks hit you. More info...

Bot Activity Log
  • Tor Router
  • Comment And Forum Spammers
  • Hacking Or Attack Bot
  • Tor Node
  • Exploit Attacks Against Website
  • HTTP Form Spam Bot
  • Tor Exit Node
  • Web Server Attack Source
  • Harvester, Spam Or Comment Spam Host
  • Tor Exit Node
  • Forum, Blog Or Other Website Spammer
  • IP Connected To A Known Honeypot
  • Hacking, Exploit Or Other Attack Source
  • Scanning Or Brute Force Attacks (Last 30 Days)
  • Hacked IP Or Spam Source
  • Abuse Source (Hacking Or Spam)
Reputation Blocklists

The IP address 104.244.72.115 was found on 14 out of the 133 IP reputation blocklists we monitor.

  • Barracuda Reputation Block List
  • Brukalai.Lt Dnsbl
  • Cbl
  • Dan.Me.Uk (All Tor Nodes)
  • Dan.Me.Uk (Only Tor Exit Nodes)
  • E Fnet Rbl
  • Fmb.La
  • Inter Server Bl
  • Just Spam.Org
  • S5h.Net I Pv4 Rbl
  • Spamhaus Xbl Exploits Block List
  • Spam Rats! All
  • Spam Rats! Spam
  • Tornevall Net Dnsbl

Look up another IP

Do this next

We're on a mission to better secure every web app on internet. Here's some ways you can jump in:

1. Check out our Open Source Web Application Firewall

Wafris is the free open source WAF that you can use to understand and visualize the requests hitting your apps and then take steps to protect them. It's still in early development, but you can signup for the waitlist to get early access at wafris.org

2. Investigate IP addresses with our IP Lookup service

Bad bots and probes hit sites within minutes of being put on the Internet. Sort the good from the bad by identifying request IPs as coming from bots, Tor networks, VPNs, proxies and malware hosts at wafris.org/ip-lookup

3. Anything else?

If you have any questions or need help finding the right way to handle web app security issues, please let us know at: help@wafris.org