JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.157.226

104.28.157.226 was found in our database!

This IP was reported 545 times. Confidence of Abuse is 13%: ?

13%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Kent, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.157.226

Whois 104.28.157.226

IP Abuse Reports for 104.28.157.226:

This IP address has been reported a total of 545 times from 288 distinct sources. 104.28.157.226 was first reported on March 24th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bogdanv	2026-05-27 13:52:45 (2 weeks ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-05-01 09:10:02 (1 month ago)	postfix-non-smtp-command - IP: 104.28.157.226 - time="2026-05-01T11:07:11+02:00" level=info msg="(5 ... show more postfix-non-smtp-command - IP: 104.28.157.226 - time="2026-05-01T11:07:11+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-non-smtp-command by ip 104.28.157.226 (US/13335) : 4h ban on Ip 104.28.157.226" module=db show less	Email Spam
🇺🇸 LockBlock	2026-04-13 14:21:00 (1 month ago)	2026-04-13 14:21:00: Minecraft server scan detected from 104.28.157.226 on port 25565 of racknerd-e7 ... show more 2026-04-13 14:21:00: Minecraft server scan detected from 104.28.157.226 on port 25565 of racknerd-e7e1a9 show less	Port Scan
🇹🇷 rtbh.com.tr	2026-04-09 20:12:24 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-08 20:12:23 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇮 iamxorum	2026-04-07 18:19:01 (2 months ago)	2026-04-07T18:19:00.681701+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-04-07T18:19:00.681701+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=104.28.157.226 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=28614 DF PROTO=TCP SPT=53003 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 [email protected]	2026-04-07 17:44:06 (2 months ago)	Attack attempt against Interwebbi servers; Port Scan detected from 104.28.157.226 (US/United State ... show more Attack attempt against Interwebbi servers; Port Scan detected from 104.28.157.226 (US/United States/-). 5 hits in the last 110 seconds; IP: 104.28.157.226; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇫🇷 tavis.page	2026-04-07 17:39:02 (2 months ago)	Blocked by UFW on server [8090/tcp] Source port: 55027 TTL: 48 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on server [8090/tcp] Source port: 55027 TTL: 48 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Petre 21_ip	2026-04-07 17:34:06 (2 months ago)	2026-04-07T19:34:05.499824+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-04-07T19:34:05.499824+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=104.28.157.226 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=8368 DF PROTO=TCP SPT=54162 DPT=8090 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 ISPLtd	2026-04-07 17:31:15 (2 months ago)	Apr 7 14:31:12 104.28.157.226 TCP SPT=53815 DPT=8070 SYN Apr 7 14:31:14 104.28.157.226 TCP SPT=538 ... show more Apr 7 14:31:12 104.28.157.226 TCP SPT=53815 DPT=8070 SYN Apr 7 14:31:14 104.28.157.226 TCP SPT=53815 DPT=8070 SYN Apr 7 14:31:15 104.28.157.226 TCP SPT=53815 DPT=8070 ... show less	Port Scan
🇫🇷 vtchost.com	2026-04-07 17:25:56 (2 months ago)	Apr 7 19:25:56 vtchost kernel: [ 7943.637939] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Apr 7 19:25:56 vtchost kernel: [ 7943.637939] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=104.28.157.226 DST=161.97.181.152 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=21737 DF PROTO=TCP SPT=54651 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 ISPLtd	2026-04-07 17:14:55 (2 months ago)	Apr 7 19:14:52 104.28.157.226 TCP SPT=53971 DPT=8090 SYN Apr 7 19:14:53 104.28.157.226 TCP SPT=539 ... show more Apr 7 19:14:52 104.28.157.226 TCP SPT=53971 DPT=8090 SYN Apr 7 19:14:53 104.28.157.226 TCP SPT=53971 DPT=8090 SYN Apr 7 19:14:54 104.28.157.226 TCP SPT=53971 DPT=8090 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-04-07 17:14:19 (2 months ago)	Apr 7 19:14:14 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Apr 7 19:14:14 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.157.226 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=38639 DF PROTO=TCP SPT=54609 DPT=8090 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 7 19:14:15 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.157.226 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=38640 DF PROTO=TCP SPT=54609 DPT=8090 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 7 19:14:16 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.157.226 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=38641 DF PROTO=TCP SPT=54609 DPT=8090 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 7 19:14:18 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.157.226 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=38642 DF PROTO=TCP SPT=54609 DPT=8090 WI ... show less	Port Scan
🇹🇷 rtbh.com.tr	2026-04-06 20:12:22 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇵🇱 sefinek.net	2026-04-05 20:47:32 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 545 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 59.145.124.90

🇮🇩 43.165.194.10

🇺🇸 192.3.153.227

🇳🇴 185.12.59.117

🇧🇷 177.85.247.230

🇻🇳 160.25.81.6

🇮🇳 135.235.138.43

🇺🇸 91.230.168.90

🇬🇧 90.216.12.146

🇺🇸 73.36.177.174

🇭🇰 69.165.75.162

🇺🇸 50.190.89.138

🇲🇾 49.124.155.182

🇩🇪 45.135.141.7

🇺🇸 24.61.216.148

🇮🇳 202.53.94.246

🇨🇳 120.224.242.78

🇨🇦 51.161.37.216

🇱🇹 45.227.254.170

🇫🇷 45.84.88.32