Check my connection

IP check

104.20.23.154Who is behind this IP, and should you worry?

Note: This address belongs to Cloudflare.

Signals

Scores from other services (we don't copy them)

We cover abuse blocklists, network type and registry data. We don't scan for malware: for antivirus verdicts, check VirusTotal.

It is in the IP ranges Cloudflare publishes. Traffic from it comes from a server or service running there, not from someone's home connection. Anyone can rent a server in a public cloud.

What to do: Traffic from a cloud server is usually automated. That is normal for APIs and monitoring, but unusual for a login form. If it misbehaves, report it to the abuse contact of Cloudflare.
Download JSON Plain text

Key facts

Key facts
IP address
104.20.23.154 IPv4 · defanged 104[.]20[.]23[.]154
Reverse DNS
None
Network type
Hosting, cloud or data center
Reputation
OK: No match on our 2 blocklists
Owner / ISP
Couldn't check: Could not check
ASN
AS13335 · Cloudflare, Inc.
Location
Couldn't check: Could not check
Abuse contact
Couldn't check: Could not check

Reputation

Reputation
Cloudflare IP ranges Cloud providers
Note: Matched · List of Nov 13, 2026
iplover sensors
Couldn't check: Not checked
Other lists
No match in the other 33 lists · see every list and its date
Every list we checked

1 matched · 33 no match · 1 not checked

Blocklists

Blocklists
abuse.ch Feodo Tracker (botnet C2)
No match · List of Nov 14, 2026
Spamhaus DROP (includes the former EDROP)
No match · List of Nov 13, 2026

Tor

Tor
Tor Project bulk exit list
No match · List of Nov 14, 2026

VPN ranges

VPN ranges
X4BNet lists_vpn (VPN ranges)
No match · List of Nov 13, 2026

Privacy relays

Privacy relays
iCloud Private Relay egress ranges
No match · List of Nov 13, 2026

Scanners

Scanners
Censys scanning ranges
No match · List of Nov 10, 2026
Driftnet (internet-measurement.com)
No match · List of Nov 10, 2026
Rapid7 Project Sonar
No match · List of Nov 10, 2026
Shodan (reverse DNS under shodan.io)
No match
Shadowserver (reverse DNS under shadowserver.org)
No match

Cloud providers

Cloud providers
AWS IP address ranges
No match · List of Nov 12, 2026
Google Cloud IP ranges (cloud.json)
No match · List of Nov 13, 2026
Oracle Cloud public IP ranges
No match · List of Oct 28, 2026
Cloudflare IP ranges
Matched · List of Nov 13, 2026
Fastly public IP list
No match · List of Nov 13, 2026
DigitalOcean geofeed
No match · List of Nov 13, 2026
Akamai Cloud (Linode) geofeed
No match · List of Nov 13, 2026

Crawlers

Crawlers
Google common crawlers (Googlebot)
No match · List of Nov 13, 2026
Google special-case crawlers (e.g. AdsBot)
No match · List of Nov 13, 2026
Google user-triggered fetchers
No match · List of Nov 13, 2026
Bingbot
No match · List of Jan 3, 2024
Applebot
No match · List of Sep 15, 2026
DuckDuckBot
No match · List of Sep 1, 2026
OpenAI GPTBot
No match · List of Sep 22, 2026
OpenAI OAI-SearchBot
No match · List of Jan 2, 2026
OpenAI ChatGPT-User
No match · List of Nov 6, 2026
PerplexityBot
No match · List of Oct 28, 2026
Perplexity-User
No match · List of Oct 28, 2026
Common Crawl CCBot
No match · List of Aug 11, 2026
Anthropic crawlers (ClaudeBot, Claude-User, Claude-SearchBot)
No match · List of Oct 20, 2026
Amazonbot
No match · List of Sep 8, 2026
Amazon Amzn-SearchBot
No match · List of Sep 8, 2026
Amazon Amzn-User
No match · List of Nov 4, 2025
AhrefsBot and AhrefsSiteAudit
No match · List of Nov 13, 2026

Our sensors

Our sensors
iplover sensors
Not checked

Network type

Network type
Network type
Hosting, cloud or data center

What we checked

What we checked
Tor exit node
Not listed · Tor Project bulk exit list List of Nov 14, 2026
Privacy relay
Not listed · iCloud Private Relay egress ranges List of Nov 13, 2026
VPN
Not listed · X4BNet lists_vpn (VPN ranges) · network owner's name (estimate) List of Nov 13, 2026
Public or open proxy
Couldn't check: Not identified · no free official source (needs a licensed provider, not connected)
Web proxy
Couldn't check: Not identified · no free official source (needs a licensed provider, not connected)
Residential proxy
Couldn't check: Not identified · no free official source (needs a licensed provider, not connected)
Hosting, cloud or data center
Note: Listed · 7 cloud provider lists · network owner's name (estimate) List of Nov 13, 2026
Mobile carrier
Couldn't check: Not identified · network owner's name (estimate) · no free official source (needs a licensed provider, not connected)
Business or enterprise network
Couldn't check: Not identified · network owner's name (estimate) · no free official source (needs a licensed provider, not connected)
Residential ISP
Couldn't check: Not identified · network owner's name (estimate) · no free official source (needs a licensed provider, not connected)

Registry (RDAP)

Couldn't check

The registry (RDAP) returned an error, so its details are missing. Everything else below is still shown. Try again

Reverse DNS

Reverse DNS
Reverse DNS
None

How we check: we look up the address's reverse DNS name, then look up that name and see whether it points back to the same address.

Location

Location
Registered in
None
City
Not available: we don't use a geolocation database for other people's addresses.

Domains on this IP

Many websites can share one address (CDNs, shared hosting), so blocking an address can block sites you didn't mean to. We don't keep a list of the domains on an address.

See sites seen on this address at urlscan.io

Check it elsewhere

These services have their own data and terms. We only link to them: the address is sent to them only if you click.

JSON and command line

JSON · Plain text

curl -s "https://iplover.com/api/check/104.20.23.154?lang=en"

What this means and where the data comes from

What the findings mean

Reverse DNS
Many addresses have no reverse DNS name, and on its own that means nothing. Mail servers are the exception: without one, other servers often reject their email.
Network type

This address is in the IP ranges Cloudflare publishes, so it belongs to a server or network service there, not to a home connection.

Network range
CIDR is the size of the block: /24 means 256 addresses. The smaller the number after the slash, the bigger the block.

Where the data comes from

  • Lists last updated Nov 14, 2026; 34 sources checked. see every list and its date · About our sources
  • Registry data: RDAP (rdap.org), fetched 2026-11-14 01:16 UTC.
  • Reverse DNS: Cloudflare DNS over HTTPS, checked 2026-11-14 01:16 UTC.

Notes and limitations

No source is complete. “No sign of abuse” means none of the sources listed at iplover.com/sources matched; it is not a guarantee.

The network type describes the network, not the person. A VPN, proxy, Tor, hosting or mobile address is not a sign of abuse, and no IP address shows who someone is or exactly where they are.

We cover abuse blocklists, network type and registry data. We don't scan for malware: for antivirus verdicts, check VirusTotal.