104.28.158.72
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇺🇸 United States of America
- City
- Aldine, Texas
Abuse Reports
Total reports
26 from
25 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
|
Exploited Host Web App Attack | |
| 🇳🇱 e.fierstra |
ModSecurity hits exceeded
|
Bad Web Bot Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇸🇪 eagle |
104.28.158.72 - - [10/Nov/2026:07:47:13 +0000] "GET /.env.save HTTP/1.1" 404 207 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "[server]"
...
|
Bad Web Bot Web App Attack | |
| 🇷🇴 Viperel |
RouterOS: Repeated connections to sensitive (SSH/RDP/TELNET/DB/MGM) ports detected.
|
Port Scan Brute-Force | |
| 🇩🇪 reznekcs |
Blocked by UFW firewall
|
Brute-Force | |
| 🇳🇱 DonAtari |
DShield firewall scan - TCP to port 22
|
Brute-Force SSH | |
| 🇮🇳 Mr.Singh |
NFT blocked 104.28.158.72 on 18-Sep-2026..
|
Port Scan Brute-Force | |
| Anonymous |
Unauthorized connection
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 51413)
Source port: 46700
TTL: 54
Packet length: 60
TOS: 0x08
This report (for 104.28.158.72) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 EGP Abuse Dept |
Scanning for port/service exploits on tpc-027.mach3builders.nl
|
Port Scan Hacking | |
| Anonymous |
Try to connect to Port_Scan_40421_stealth
|
Port Scan | |
| 🇺🇸 RAP |
2026-03-10 14:13:02 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| Anonymous |
Port Scanner
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=16323 dstport=22
|
Port Scan Hacking SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown