AbuseIPDB » 104.28.157.113

104.28.157.113 was found in our database!

This IP was reported 6,815 times. Confidence of Abuse is 100%: ?

100%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 104.28.157.113

Whois 104.28.157.113

IP Abuse Reports for 104.28.157.113:

This IP address has been reported a total of 6,815 times from 1,119 distinct sources. 104.28.157.113 was first reported on November 1st 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
10dencehispahard SL	2025-06-10 08:01:32 (1 week ago)	WP probing for vulnerabilities	Hacking Exploited Host
stinpriza	2025-06-09 13:24:32 (1 week ago)	(XMLRPC) xmlrpc banned 104.28.157.113 (US/United States/-): 1 in the last 3600 secs	Web App Attack
Steve	2025-06-03 19:38:38 (2 weeks ago)	Attempts against non-existent wordpress site	Brute-Force Web App Attack
Study Bitcoin 🤗	2025-05-31 08:43:15 (3 weeks ago)	Port probe to tcp/2222 (rockwell csp2) [srv135]	Port Scan SSH
Anonymous	2025-05-30 15:06:31 (3 weeks ago)	$f2bV_matches	Brute-Force SSH
ukrpack.net	2025-05-28 17:58:55 (3 weeks ago)	HTTP_Brute-Force	Brute-Force
URAN Publishing Service	2025-05-28 10:56:53 (3 weeks ago)	104.28.157.113 - - [28/May/2025:13:51:05 +0300] "GET /xmlrpc.php HTTP/1.1" 404 277 "-" "Mozilla/5.0 ... show more104.28.157.113 - - [28/May/2025:13:51:05 +0300] "GET /xmlrpc.php HTTP/1.1" 404 277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.28.157.113 - - [28/May/2025:13:56:52 +0300] "GET /xmlrpc.php HTTP/1.1" 404 278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
statistics indonesia	2025-05-27 22:25:36 (3 weeks ago)	XML RPC Scan Activities	Brute-Force Web App Attack
rtbh.com.tr	2025-05-18 20:08:14 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-05-17 20:08:12 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ImMarvolo	2025-05-17 05:37:16 (1 month ago)	2025-05-17T07:35:31.020034+02:00 sgb-01 sshd[3717542]: pam_unix(sshd:auth): authentication failure; ... show more2025-05-17T07:35:31.020034+02:00 sgb-01 sshd[3717542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.157.113 2025-05-17T07:35:33.400686+02:00 sgb-01 sshd[3717542]: Failed password for invalid user postgres from 104.28.157.113 port 42639 ssh2 2025-05-17T07:37:16.005543+02:00 sgb-01 sshd[3717572]: Invalid user oracle from 104.28.157.113 port 42563 ... show less	Brute-Force SSH
mtnmedia.group	2025-05-17 05:01:09 (1 month ago)	2025-05-17T06:57:36.128483+02:00 hera sshd[1840856]: pam_unix(sshd:auth): authentication failure; lo ... show more2025-05-17T06:57:36.128483+02:00 hera sshd[1840856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.157.113 user=root 2025-05-17T06:57:37.857023+02:00 hera sshd[1840856]: Failed password for root from 104.28.157.113 port 43137 ssh2 2025-05-17T07:01:06.529348+02:00 hera sshd[1841109]: Invalid user gitolite from 104.28.157.113 port 43353 2025-05-17T07:01:06.537122+02:00 hera sshd[1841109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.157.113 2025-05-17T07:01:08.762962+02:00 hera sshd[1841109]: Failed password for invalid user gitolite from 104.28.157.113 port 43353 ssh2 ... show less	Brute-Force SSH
shaunc	2025-05-17 04:52:29 (1 month ago)	May 16 23:52:25 mailman sshd[20390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreMay 16 23:52:25 mailman sshd[20390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.157.113 May 16 23:52:27 mailman sshd[20390]: Failed password for invalid user admin from 104.28.157.113 port 44701 ssh2 May 16 23:52:27 mailman sshd[20390]: Disconnected from 104.28.157.113 port 44701 [preauth] show less	Brute-Force SSH
rafled	2025-05-17 04:32:10 (1 month ago)	May 17 04:32:10 internal-mail-rafled-com sshd[3272154]: Invalid user jt from 104.28.157.113 port 427 ... show moreMay 17 04:32:10 internal-mail-rafled-com sshd[3272154]: Invalid user jt from 104.28.157.113 port 42727 ... show less	Brute-Force SSH
valornode.com	2025-05-17 04:18:35 (1 month ago)	May 17 04:16:46 mysql sshd[3582330]: Failed password for invalid user rafa from 104.28.157.113 port ... show moreMay 17 04:16:46 mysql sshd[3582330]: Failed password for invalid user rafa from 104.28.157.113 port 43986 ssh2 May 17 04:18:32 mysql sshd[3582339]: Invalid user dns from 104.28.157.113 port 42777 May 17 04:18:32 mysql sshd[3582339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.157.113 May 17 04:18:32 mysql sshd[3582339]: Invalid user dns from 104.28.157.113 port 42777 May 17 04:18:34 mysql sshd[3582339]: Failed password for invalid user dns from 104.28.157.113 port 42777 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩