JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.156.242

104.28.156.242 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 4%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇹🇼 Taiwan
City	Neili, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.156.242

Whois 104.28.156.242

IP Abuse Reports for 104.28.156.242:

This IP address has been reported a total of 58 times from 14 distinct sources. 104.28.156.242 was first reported on December 13th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ISPLtd	2026-10-14 06:03:14 (2 days ago)	Oct 14 03:02:56 104.28.156.242 TCP SPT=12968 DPT=1111 SYN Oct 14 03:02:57 104.28.156.242 TCP SPT=129 ... show more Oct 14 03:02:56 104.28.156.242 TCP SPT=12968 DPT=1111 SYN Oct 14 03:02:57 104.28.156.242 TCP SPT=12968 DPT=1111 SYN Oct 14 03:02:58 104.28.156.242 TCP SPT=12968 DPT=1111 ... show less	Port Scan
Anonymous	2026-06-29 08:21:36 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇹 VHosting	2026-06-23 03:03:35 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇩🇪 netclix.gr	2026-06-01 21:46:03 (4 months ago)	(bot_kill_mega) Aggressive Bot Blocked: MJ12bot 104.28.156.242 (TW/Taiwan/-): 1 in the last 4600 sec ... show more (bot_kill_mega) Aggressive Bot Blocked: MJ12bot 104.28.156.242 (TW/Taiwan/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.28.156.242 - - [02/Jun/2026:00:45:58 +0300] "GET /robots.txt HTTP/1.1" 200 1169 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" show less	Port Scan
Anonymous	2026-04-30 16:31:06 (5 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 Rayulcifer	2026-04-17 05:29:47 (5 months ago)	104.28.156.242 - - [17/Apr/2026:00:29:46 -0500] "CONNECT chat.openai.com:443 HTTP/1.1" 502 488 "-" " ... show more 104.28.156.242 - - [17/Apr/2026:00:29:46 -0500] "CONNECT chat.openai.com:443 HTTP/1.1" 502 488 "-" "-" 104.28.156.242 - - [17/Apr/2026:00:29:46 -0500] "CONNECT chat.openai.com:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 xmission.com	2025-12-20 02:04:15 (9 months ago)	Blocked by UFW (TCP on 123) Source port: 62158 TTL: 54 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 123) Source port: 62158 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 104.28.156.242) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-11-21 15:52:35 (10 months ago)	Blocked by UFW (TCP on 123) Source port: 24341 TTL: 54 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 123) Source port: 24341 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 104.28.156.242) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 backslash	2025-11-03 20:30:30 (11 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇺🇸 xmission.com	2025-10-28 03:49:44 (11 months ago)	Blocked by UFW (TCP on 17442) Source port: 58287 TTL: 51 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 17442) Source port: 58287 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 104.28.156.242) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-09-06 21:47:21 (1 year ago)	Blocked by UFW (TCP on 6889) Source port: 52715 TTL: 51 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6889) Source port: 52715 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 104.28.156.242) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇼 kk_it_man	2025-08-31 17:43:02 (1 year ago)	ET WEB_SERVER PHP Possible https Local File Inclusion Attempt ET WEB_SERVER Script tag in URI Poss ... show more ET WEB_SERVER PHP Possible https Local File Inclusion Attempt ET WEB_SERVER Script tag in URI Possible Cross Site Scripting Attempt ET WEB_SPECIFIC_APPS Possible Citrix Gateway CVE-2023-24488 Exploit Attempt M1 ET WEB_SPECIFIC_APPS Possible Citrix Gateway CVE-2023-24488 Exploit Attempt M2 SURICATA Applayer Mismatch protocol both directions SURICATA HTTP invalid content length field in request show less	Port Scan
🇹🇼 kk_it_man	2025-08-18 21:13:02 (1 year ago)	ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body ET WEB_SERVER Possible SQL ... show more ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body ET WEB_SERVER Possible SQL Injection WAITFOR DELAY in HTTP URI ET WEB_SERVER SELECT USER SQL Injection Attempt in URI ET WEB_SERVER SQL Injection Select Sleep Time Delay GPL WEB_SERVER 403 Forbidden SURICATA Applayer Mismatch protocol both directions show less	Port Scan
🇹🇼 kk_it_man	2025-08-18 20:56:02 (1 year ago)	hack	Hacking
Anonymous	2024-11-17 05:09:03 (1 year ago)		DNS Compromise DDoS Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.223.152.105

🇫🇷 91.196.152.75

🇸🇬 47.128.121.55

🇶🇦 37.208.144.199

🇺🇸 35.245.189.222

🇺🇸 20.115.209.228

🇲🇾 202.165.26.170

🇹🇼 198.235.24.112

🇮🇹 178.249.211.72

🇯🇵 160.251.202.50

🇿🇦 152.110.82.75

🇻🇳 118.70.125.152

🇳🇱 109.160.32.49

🇨🇳 106.6.216.234

🇨🇳 82.156.229.39

🇳🇱 77.239.124.72

🇺🇸 65.188.147.216

🇧🇪 35.240.66.174

🇧🇪 35.195.205.60

🇧🇪 34.38.213.142