JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.156.135

104.28.156.135 was found in our database!

This IP was reported 385 times. Confidence of Abuse is 66%: ?

66%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.156.135

Whois 104.28.156.135

IP Abuse Reports for 104.28.156.135:

This IP address has been reported a total of 385 times from 207 distinct sources. 104.28.156.135 was first reported on March 13th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-07-09 14:46:40 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-07-09 04:30:28 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 kosada.com	2026-07-06 20:30:15 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-26 08:08:55 (2 weeks ago)	[redacted] 104.28.156.135 - - [26/Jun/2026:10:08:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" " ... show more [redacted] 104.28.156.135 - - [26/Jun/2026:10:08:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/89.0.0.0 Safari/537.36" [redacted] 104.28.156.135 - - [26/Jun/2026:10:08:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36" [redacted] 104.28.156.135 - - [26/Jun/2026:10:08:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/72.0.0.0 Safari/537.36" [redacted] 104.28.156.135 - - [26/Jun/2026:10:08:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/74.0.0.0 Safari/537.36" [redacted] 104.28.156.135 - - [26/Jun/2026:10:08:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, l ... show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-26 03:00:53 (2 weeks ago)	User login to application from malicious IP 104.28.156.135.. Threat Score: 4/10 (MEDIUM). Confidence ... show more User login to application from malicious IP 104.28.156.135.. Threat Score: 4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
Anonymous	2026-06-22 18:16:01 (2 weeks ago)	WEB attack	Brute-Force
🇫🇷 SpaceHost-Server	2026-06-15 22:25:38 (3 weeks ago)		Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-06-15 18:00:10 (3 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 xmission.com	2026-06-15 15:01:19 (3 weeks ago)	104.28.156.135 - - [15/Jun/2026:09:01:19 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 ... show more 104.28.156.135 - - [15/Jun/2026:09:01:19 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Web App Attack
🇫🇷 Kenshin869	2026-06-12 07:49:09 (4 weeks ago)	Wordpress unauthorized access attempt	Brute-Force
🇮🇩 sockominfo	2026-06-12 01:00:53 (4 weeks ago)	User login to application from malicious IP 104.28.156.135.. Threat Score: 3.9/10 (LOW). Confidence: ... show more User login to application from malicious IP 104.28.156.135.. Threat Score: 3.9/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-12 00:00:10 (4 weeks ago)	User login to application from malicious IP 104.28.156.135.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 104.28.156.135.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 jormaster3k	2026-06-10 09:00:38 (1 month ago)	Attack against WordPress	Web App Attack
🇲🇾 Rizzy	2026-06-09 08:17:41 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇷🇴 gtheo99	2026-06-08 08:41:24 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 104.28.156.135 (CA/Canada/-): 2 in the last 900 secs	Brute-Force Email Spam

Showing 1 to 15 of 385 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇺 197.227.8.186

🇳🇱 185.212.129.39

🇨🇳 171.120.69.231

🇫🇷 167.86.81.93

🇺🇸 158.62.177.242

🇳🇱 157.245.77.56

🇰🇷 118.37.214.187

🇧🇩 103.154.158.70

🇨🇦 85.217.149.60

🇨🇳 60.16.201.234

🇮🇪 34.255.87.98

🇺🇸 3.131.220.121

🇺🇸 192.178.37.28

🇲🇽 187.155.51.146

🇳🇱 185.226.197.75

🇧🇷 179.216.16.184

🇺🇸 162.216.150.58

🇺🇸 150.107.38.98

🇫🇮 147.185.133.89

🇹🇭 122.154.74.205