JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.28.153.6

Recent Activity

Abuse Confidence Score

35% Elevated

82 reports

54 reporters · latest 4 days ago

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇺🇸 United States of America
City: Kent, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

82 from 54 distinct reporters

First reported

August 11th 2023

Most recent report

4 days ago

Last 60 days

Top reporter locations 🇦🇹 Austria 2 🇺🇸 United States of America 2 🇨🇦 Canada 1

Most common categories Bad Web Bot 4 Port Scan 4 Hacking 3 Web App Attack 2 Open Proxy 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 uthul	2026-11-07 09:56:21 UTC · (4 days ago)	T-Pot honeypot: 3 hits on ports [80] (automated)	Port Scan Web App Attack
🇯🇵 SentinalX by uzumaru	2026-11-07 05:50:00 UTC · (5 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.gstatic.com:443	Open Proxy Port Scan
Anonymous	2026-11-02 07:47:22 UTC · (1 week ago)	...	Bad Web Bot
🇺🇸 sefinek.net	2026-10-29 19:49:23 UTC · (1 week ago)	Blocked by UFW on NY01 [80/tcp] \| SPT: 54300 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇦🇹 Pingger Shikkoken	2026-10-28 22:31:38 UTC · (2 weeks ago)	2026-10-28T22:31:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.153.6 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=55362 DF PROTO=TCP SPT=24326 DPT=80 WINDO ... show more 2026-10-28T22:31:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.153.6 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=55362 DF PROTO=TCP SPT=24326 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-28T22:31:39+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.153.6 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=55363 DF PROTO=TCP SPT=24326 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-28T22:31:40+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.153.6 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=55364 DF PROTO=TCP SPT=24326 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
Anonymous	2026-10-18 21:37:56 UTC · (3 weeks ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking Bad Web Bot Web App Attack
🇦🇹 Pingger Shikkoken	2026-10-16 02:15:08 UTC · (3 weeks ago)	2026-10-16T02:15:08+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.153.6 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=61708 DF PROTO=TCP SPT=37959 DPT=80 WINDO ... show more 2026-10-16T02:15:08+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.153.6 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=61708 DF PROTO=TCP SPT=37959 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-16T02:15:09+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.153.6 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=61709 DF PROTO=TCP SPT=37959 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-16T02:15:10+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.153.6 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=61710 DF PROTO=TCP SPT=37959 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇨🇭 backslash	2026-07-14 02:12:02 UTC · (3 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
Anonymous	2026-07-10 04:31:48 UTC · (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇪🇸 librebit	2026-06-11 07:33:47 UTC · (5 months ago)	Brute force	Brute-Force
🇫🇷 masterguru	2026-06-11 04:41:25 UTC · (5 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.28.153.6 (US/United States/-): 2 in the last 3600 secs (0-196)	Hacking
🇩🇪 ITSNF	2026-06-11 02:55:04 UTC · (5 months ago)	Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=80	Port Scan Hacking
🇪🇸 Francisco Vallejo	2026-06-09 20:07:52 UTC · (5 months ago)	[Tue Jun 09 22:07:49.540942 2026] [authz_core:error] [pid 2687650:tid 130566905116352] [client 104.28.153.6:52636] AH01630: client denied by server configuration: proxy:http://localhost:8080/ms-themes.php, referer: http://pihole.franvallejo.es/ms-the ... show more [Tue Jun 09 22:07:49.540942 2026] [authz_core:error] [pid 2687650:tid 130566905116352] [client 104.28.153.6:52636] AH01630: client denied by server configuration: proxy:http://localhost:8080/ms-themes.php, referer: http://pihole.franvallejo.es/ms-themes.php [Tue Jun 09 22:07:49.975322 2026] [authz_core:error] [pid 2687650:tid 130567181944512] [client 104.28.153.6:52636] AH01630: client denied by server configuration: proxy:http://localhost:8080/chosen.php, referer: http://pihole.franvallejo.es/chosen.php?p= [Tue Jun 09 22:07:50.355821 2026] [authz_core:error] [pid 2687650:tid 130566913509056] [client 104.28.153.6:52636] AH01630: client denied by server configuration: proxy:http://localhost:8080/file.php, referer: http://pihole.franvallejo.es/file.php [Tue Jun 09 22:07:50.728359 2026] [authz_core:error] [pid 2687650:tid 130566628288192] [client 104.28.153.6:52636] AH01630: client denied by server configuration: proxy:http://localhost:8080/flower.php, referer: http://pihole.franvallejo.e ... show less	Brute-Force SSH
🇩🇪 ITSNF	2026-06-09 18:25:05 UTC · (5 months ago)	Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=80	Port Scan Hacking
🇩🇪 mediacenter	2026-06-09 17:13:47 UTC · (5 months ago)	Port scans.	Port Scan

Showing 1 to 15 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 222.210.35.197

🇰🇷 220.76.91.28

🇳🇱 213.209.159.218

🇺🇸 199.165.159.43

🇧🇷 170.247.38.205

🇵🇱 162.158.172.5

🇺🇸 65.49.1.67

🇹🇷 193.35.153.136

🇺🇸 172.70.110.21

🇻🇳 118.70.239.231

🇮🇩 103.187.165.26

🇳🇱 89.21.67.173

🇳🇱 86.38.187.156

🇳🇱 77.239.124.45

🇺🇸 64.62.197.200

🇬🇧 45.135.142.72

🇬🇧 45.135.142.50

🇮🇳 45.117.64.181

🇧🇪 35.210.83.117

🇺🇸 34.235.166.244