JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.156.55

104.28.156.55 was found in our database!

This IP was reported 256 times. Confidence of Abuse is 64%: ?

64%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇪 Sweden
City	Steninge, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.156.55

Whois 104.28.156.55

IP Abuse Reports for 104.28.156.55:

This IP address has been reported a total of 256 times from 64 distinct sources. 104.28.156.55 was first reported on June 8th 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Duggy_Tuxy🧱	2026-07-06 17:20:56 (13 hours ago)	[NODE01] Banned by SYSWARDEN Firewall (Jail: L3-PORTSCAN)	Port Scan
🇨🇳 pengpeng	2026-07-05 12:07:14 (1 day ago)	monitor: on VM-0-7-ubuntu \| port: 53093 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 53093 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-04 17:46:19 (2 days ago)	Blocked by UFW (TCP on 59558) Source port: 41712 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 59558) Source port: 41712 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 104.28.156.55) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 NordhTech	2026-07-01 06:00:44 (6 days ago)	More than 3 malicious connection attempts, trying port(s) 1443/tcp, then blocked from services ...	Port Scan Hacking
🇩🇪 Marc	2026-06-30 17:00:51 (6 days ago)	104.28.156.55 - - [30/Jun/2026:19:00:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3547 "-" "Jetpack by ... show more 104.28.156.55 - - [30/Jun/2026:19:00:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3547 "-" "Jetpack by WordPress.com" 104.28.156.55 - - [30/Jun/2026:19:00:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3548 "-" "Jetpack by WordPress.com" 104.28.156.55 - - [30/Jun/2026:19:00:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3548 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" show less	Brute-Force Web App Attack
🇷🇺 Agrohim	2026-06-30 00:14:41 (1 week ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇫🇷 Duggy_Tuxy🧱	2026-06-26 17:54:13 (1 week ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇸🇪 NordhTech	2026-06-25 00:15:17 (1 week ago)	More than 3 malicious connection attempts, trying port(s) 43861/tcp, then blocked from services ...	Port Scan Hacking
🇫🇷 dynamix	2026-06-23 21:37:00 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 xmission.com	2026-06-22 17:18:59 (2 weeks ago)	Blocked by UFW (TCP on 48359) Source port: 17839 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 48359) Source port: 17839 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 104.28.156.55) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-19 01:20:47 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 104.28.156.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 104.28.156.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 21:20:44.368857 2026] [security2:error] [pid 23934:tid 23934] [client 104.28.156.55:10417] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.28.156.55 (+1 hits since last alert)\|chatgptfrance.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "chatgptfrance.net"] [uri "/xmlrpc.php"] [unique_id "ajSZbKorT0Wum4MnSHc3vwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-18 21:36:59 (2 weeks ago)	Blocked by UFW (TCP on 51413) Source port: 37392 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 37392 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 104.28.156.55) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-18 21:13:15 (2 weeks ago)	104.28.156.55 - - [18/Jun/2026:23:12:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/12.0 ... show more 104.28.156.55 - - [18/Jun/2026:23:12:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/12.0; WordPress/6.4; http://site16193056.com" 104.28.156.55 - - [18/Jun/2026:23:12:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.0; WordPress/6.4; http://site16193056.com" 104.28.156.55 - - [18/Jun/2026:23:13:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 104.28.156.55 - - [18/Jun/2026:23:13:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 104.28.156.55 - - [18/Jun/2026:23:13:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" ... show less	Brute-Force Web App Attack
🇬🇧 noise.agency	2026-06-18 20:21:43 (2 weeks ago)	(wordpress) Failed wordpress login from 104.28.156.55 (SE/Sweden/-)	Brute-Force
🇺🇸 Jason Howell	2026-06-17 18:44:21 (2 weeks ago)	104.28.156.55 - - [17/Jun/2026:13:30:49 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3653 "-" "Jetpack by ... show more 104.28.156.55 - - [17/Jun/2026:13:30:49 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3653 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 104.28.156.55 - - [17/Jun/2026:13:34:01 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3653 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" 104.28.156.55 - - [17/Jun/2026:13:36:31 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3653 "-" "Jetpack/12.1; WordPress/6.3; http://site96472095.com" 104.28.156.55 - - [17/Jun/2026:13:42:11 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3653 "-" "WordPress.com; https://wordpress.com" 104.28.156.55 - - [17/Jun/2026:13:44:20 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3654 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack

Showing 1 to 15 of 256 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.186

🇵🇰 124.29.228.10

🇻🇳 116.110.15.176

🇨🇳 115.190.245.176

🇺🇸 104.23.250.53

🇳🇱 83.168.106.26

🇺🇸 76.132.238.43

🇩🇪 69.5.169.39

🇲🇾 47.250.81.7

🇺🇸 216.25.89.88

🇺🇸 198.98.56.227

🇦🇪 181.214.100.18

🇨🇭 179.43.186.241

🇺🇸 173.252.70.25

🇩🇪 167.94.146.56

🇬🇧 118.26.104.179

🇸🇾 5.155.108.97

🇷🇴 2.57.122.150

🇹🇭 202.29.220.126

🇻🇳 125.212.235.194