🇳🇱
Alt255
2026-11-06 09:48:24
UTC ·
(1 week ago)
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.153.255 - - [06/Nov/2026:10:48:12 +0100] "GET /.env.bak HTTP/1.1" 301 6415 "https://www.google.com/search?q=stukadoorsbedrijfrijnmond.nl" ...
show more
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.153.255 - - [06/Nov/2026:10:48:12 +0100] "GET /.env.bak HTTP/1.1" 301 6415 "https://www.google.com/search?q=stukadoorsbedrijfrijnmond.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-27 22:09:47
UTC ·
(2 weeks ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.153.255 - - [27/Oct/2026:23:09:33 +0100] "GET /.git/HEAD HTTP/1.1" 404 7403 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compat ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.153.255 - - [27/Oct/2026:23:09:33 +0100] "GET /.git/HEAD HTTP/1.1" 404 7403 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-26 17:52:25
UTC ·
(2 weeks ago)
[testbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.153.255 - - [26/Oct/2026:18:52:20 +0100] "GET /.env.test HTTP/1.1" 404 7909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ...
show more
[testbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.153.255 - - [26/Oct/2026:18:52:20 +0100] "GET /.env.test HTTP/1.1" 404 7909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-24 14:18:45
UTC ·
(2 weeks ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.153.255 - - [24/Oct/2026:16:18:37 +0200] "GET /.env.save HTTP/1.1" 301 6186 "https://www.google.com/search?q=www.sahayoga.nl" "Mozilla/5.0 ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.153.255 - - [24/Oct/2026:16:18:37 +0200] "GET /.env.save HTTP/1.1" 301 6186 "https://www.google.com/search?q=www.sahayoga.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-07-26 15:44:39
UTC ·
(3 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
2026-07-18 16:30:25
UTC ·
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇺🇸
Lee Daniel
2026-07-07 12:53:14
UTC ·
(4 months ago)
104.28.153.255 - - [07/Jul/2026:08:53:12 -0400] "GET /xampp/ HTTP/1.1" 404 38668 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
104.28.153.255 - - [07/Jul/2026:08:53:12 -0400] "GE ...
show more
104.28.153.255 - - [07/Jul/2026:08:53:12 -0400] "GET /xampp/ HTTP/1.1" 404 38668 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
104.28.153.255 - - [07/Jul/2026:08:53:12 -0400] "GET /xampp HTTP/1.1" 404 38661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
104.28.153.255 - - [07/Jul/2026:08:53:13 -0400] "GET /phpinfo.php HTTP/1.1" 404 38678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
104.28.153.255 - - [07/Jul/2026:08:53:13 -0400] "GET /info.php HTTP/1.1" 404 38664 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
104.28.153.255 - - [07/Jul/2026:08:53:13 -0400] "GET /phpmyadmin/ HTTP/1.1" 404 38678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/53
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-27 17:33:21
UTC ·
(4 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇦🇺
screwlooseit.com.au
2026-06-14 01:27:18
UTC ·
(4 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇫🇷
dynamix
2026-06-14 00:15:09
UTC ·
(4 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇩🇪
Paul Smith
2026-05-12 22:05:28
UTC ·
(6 months ago)
Email Auth Brute force attack 2/1 in last day
Brute-Force
🇨🇭
Origon
2026-03-13 02:37:06
UTC ·
(8 months ago)
postfix-non-smtp-command - IP: 104.28.153.255 - time="2026-03-13T03:37:05+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-non-smtp-command by ip 104.28.153.255 (US/13335) : 4h ban on Ip 104.28 ...
show more
postfix-non-smtp-command - IP: 104.28.153.255 - time="2026-03-13T03:37:05+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-non-smtp-command by ip 104.28.153.255 (US/13335) : 4h ban on Ip 104.28.153.255" module=db
show less
Email Spam
🇺🇸
xmission.com
2026-03-07 01:44:28
UTC ·
(8 months ago)
Blocked by UFW (TCP on 1)
Source port: 17908
TTL: 52
Packet length: 60
TOS: 0x08
This report (for 104.28.153.255) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇪🇸
10dencehispahard SL
2026-01-26 13:51:37
UTC ·
(9 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇫🇷
masterguru
2025-12-31 00:53:39
UTC ·
(10 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.28.153.255 (CA/Canada/-): 1 in the last 3600 secs (0-195)
Hacking
