JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.156.205

104.28.156.205 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 13%: ?

13%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.156.205

Whois 104.28.156.205

IP Abuse Reports for 104.28.156.205:

This IP address has been reported a total of 43 times from 20 distinct sources. 104.28.156.205 was first reported on January 17th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-05-22 03:42:39 (3 weeks ago)	Blocked by UFW (TCP on 54579) Source port: 26101 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 54579) Source port: 26101 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.28.156.205) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Paul Smith	2026-04-28 15:14:14 (1 month ago)	Email Auth Brute force attack 2/1 in last day	Brute-Force
🇮🇹 VHosting	2026-04-26 09:31:26 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 Rayulcifer	2026-04-10 12:11:08 (2 months ago)	104.28.156.205 - - [10/Apr/2026:07:04:41 -0500] "GET http://httpbin.org/ip HTTP/1.1" 200 855 "-" "Py ... show more 104.28.156.205 - - [10/Apr/2026:07:04:41 -0500] "GET http://httpbin.org/ip HTTP/1.1" 200 855 "-" "Python/3.8 aiohttp/3.10.11" 104.28.156.205 - - [10/Apr/2026:07:11:08 -0500] "GET http://httpbin.org/ip HTTP/1.1" 200 855 "-" "Python/3.8 aiohttp/3.10.11" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 Rayulcifer	2026-04-01 23:03:51 (2 months ago)	104.28.156.205 - - [01/Apr/2026:17:57:24 -0500] "GET http://httpbin.org/ip HTTP/1.1" 200 855 "-" "Py ... show more 104.28.156.205 - - [01/Apr/2026:17:57:24 -0500] "GET http://httpbin.org/ip HTTP/1.1" 200 855 "-" "Python/3.8 aiohttp/3.10.11" 104.28.156.205 - - [01/Apr/2026:18:03:50 -0500] "GET http://httpbin.org/ip HTTP/1.1" 200 855 "-" "Python/3.8 aiohttp/3.10.11" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 xmission.com	2026-03-28 20:38:08 (2 months ago)	Blocked by UFW (TCP on 6881) Source port: 18142 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 18142 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 104.28.156.205) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇳 liveaspankaj	2026-02-26 22:42:40 (3 months ago)	DDoS attack: 88 requests in 5m (GET / or repair.php).	DDoS Attack
🇬🇧 OptimusGO	2026-02-16 05:17:23 (3 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-02-16 05:17:13 UTC Log evidence: 02/16/2026-05:17:11.781424 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 104.28.156.205:43948 -> 185.127.18.66:3003 02/16/2026-05:17:12.806474 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 104.28.156.205:43948 -> 185.127.18.66:3003 show less	Port Scan Brute-Force
🇬🇧 OptimusGO	2026-01-10 01:12:56 (5 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-01-10 01:12:46 UTC Log evidence: show less	Port Scan Brute-Force
🇬🇧 OptimusGO	2026-01-08 01:30:32 (5 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-01-08 01:30:22 UTC Log evidence: show less	Port Scan Brute-Force
🇬🇧 OptimusGO	2026-01-07 01:01:48 (5 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-01-07 01:01:48 UTC Log evidence: show less	Port Scan Brute-Force
🇬🇧 OptimusGO	2026-01-06 00:57:31 (5 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-01-06 00:57:21 UTC Log evidence: show less	Port Scan Brute-Force
🇬🇧 OptimusGO	2025-12-29 05:13:16 (5 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2025-12-29 05:13:16 UTC Log evidence: 12/29/2025-05:13:13.754793 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 104.28.156.205:19265 -> 185.127.18.66:3003 12/29/2025-05:13:14.744886 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 104.28.156.205:19268 -> 185.127.18.66:3003 show less	Port Scan Brute-Force
🇨🇭 backslash	2025-09-03 17:35:29 (9 months ago)		DDoS Attack
🇺🇸 xmission.com	2025-08-12 19:29:00 (10 months ago)	Blocked by UFW (TCP on 51765) Source port: 29527 TTL: 50 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51765) Source port: 29527 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 104.28.156.205) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 121.14.34.219

🇸🇬 114.119.151.82

🇷🇺 94.103.87.98

🇨🇳 58.245.121.223

🇳🇱 34.12.194.214

🇺🇸 208.84.100.207

🇩🇪 207.154.230.149

🇻🇳 171.231.194.224

🇸🇬 114.119.146.142

🇺🇸 107.172.28.3

🇧🇼 41.216.209.66

🇺🇸 34.121.9.186

🇺🇸 20.64.96.40

🇫🇷 151.80.133.238

🇺🇸 147.185.132.121

🇷🇴 102.129.186.87

🇫🇷 91.231.89.189

🇨🇦 85.217.149.9

🇩🇪 57.129.81.224

🇩🇪 57.129.81.152