JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.157.200

104.28.157.200 was found in our database!

This IP was reported 106 times. Confidence of Abuse is 44%: ?

44%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.157.200

Whois 104.28.157.200

IP Abuse Reports for 104.28.157.200:

This IP address has been reported a total of 106 times from 47 distinct sources. 104.28.157.200 was first reported on January 4th 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 smtp.com.es	2026-06-21 07:56:18 (13 hours ago)	Brute force attempt.	Brute-Force Email Spam
🇳🇱 JCB	2026-06-14 17:10:00 (1 week ago)	104.28.157.200 - - [14/Jun/2026:02:53:39 +0300] "GET /htdocs/config/sftp.json HTTP/1.1" 404 196 "-" ... show more 104.28.157.200 - - [14/Jun/2026:02:53:39 +0300] "GET /htdocs/config/sftp.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 104.28.157.200 - - [14/Jun/2026:02:53:41 +0300] "GET /app/deploy/sftp-config.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
🇬🇧 consul.to	2026-06-14 03:20:55 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇩 sockominfo	2026-06-14 01:00:59 (1 week ago)	Webshell discovery success (Response: 200), Access to sensitive files detected w/ specific boundary. ... show more Webshell discovery success (Response: 200), Access to sensitive files detected w/ specific boundary., Access to sensitive configuration files detected.. Threat Score: 9.2/10 (CRITICAL). Confidence: 85%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 98%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Moderate. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇱🇻 garmtech.com	2026-06-13 23:44:05 (1 week ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇮🇩 sockominfo	2026-06-13 23:00:55 (1 week ago)	Webshell discovery success (Response: 200), Access to sensitive files detected w/ specific boundary. ... show more Webshell discovery success (Response: 200), Access to sensitive files detected w/ specific boundary., Access to sensitive configuration files detected.. Threat Score: 9.2/10 (CRITICAL). Confidence: 85%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 98%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-06-13 22:00:31 (1 week ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇯🇵 VXG-NET	2026-06-13 21:49:05 (1 week ago)	port=80, indicator_type=info-leak	Hacking
🇵🇾 SecOpsSL	2026-05-22 16:42:53 (4 weeks ago)	104.28.157.200 - - [22/May/2026:09:46:15 +0000] "POST /service/admin/soap/ HTTP/1.1" 500 506 "-" "-" ... show more 104.28.157.200 - - [22/May/2026:09:46:15 +0000] "POST /service/admin/soap/ HTTP/1.1" 500 506 "-" "-" 2 ... show less	Hacking Web App Attack
🇺🇸 xmission.com	2026-05-11 20:10:59 (1 month ago)	Blocked by UFW (TCP on 54579) Source port: 55407 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 54579) Source port: 55407 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.28.157.200) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-11 12:14:50 (1 month ago)	Blocked by UFW (TCP on 123) Source port: 55825 TTL: 47 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 123) Source port: 55825 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 104.28.157.200) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-11 07:06:39 (1 month ago)	Blocked by UFW (TCP on 54579) Source port: 56273 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 54579) Source port: 56273 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.28.157.200) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-10 18:50:19 (1 month ago)	Blocked by UFW (TCP on 54579) Source port: 56252 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 54579) Source port: 56252 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 104.28.157.200) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 smtp.com.es	2026-05-08 00:03:45 (1 month ago)	Brute force attempt.	Brute-Force Email Spam
🇮🇹 VHosting	2026-04-28 14:45:45 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 15 of 106 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.152

🇧🇷 186.248.195.11

🇹🇷 185.93.69.169

🇳🇱 176.65.139.36

🇺🇸 44.239.11.38

🇨🇳 14.149.208.167

🇨🇳 183.213.184.171

🇺🇸 147.185.132.66

🇨🇳 112.20.100.125

🇷🇴 80.94.92.130

🇺🇸 45.55.60.245

🇺🇸 44.153.117.144

🇬🇧 185.65.238.250

🇨🇳 183.222.14.237

🇩🇪 167.99.242.167

🇳🇱 45.148.10.147

🇩🇪 45.135.194.74

🇺🇸 44.101.140.249

🇺🇸 216.25.89.101

🇺🇸 159.203.78.121