JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.159.1

104.28.159.1 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 20%: ?

20%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Reston, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.159.1

Whois 104.28.159.1

IP Abuse Reports for 104.28.159.1:

This IP address has been reported a total of 14 times from 7 distinct sources. 104.28.159.1 was first reported on November 5th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-22 16:59:19 (17 hours ago)	Blocked by UFW (TCP on 51413) Source port: 29637 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 29637 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 104.28.159.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-22 02:59:36 (1 day ago)	Blocked by UFW (TCP on 51413) Source port: 28181 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 28181 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 104.28.159.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-21 14:18:57 (1 day ago)	Blocked by UFW (TCP on 51413) Source port: 28864 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 28864 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 104.28.159.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-06-21 04:25:49 (2 days ago)	monitor: on VM-0-7-ubuntu \| port: 50152 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 50152 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-21 01:50:57 (2 days ago)	Blocked by UFW (TCP on 51413) Source port: 29470 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 29470 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 104.28.159.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-20 12:53:58 (2 days ago)	Blocked by UFW (TCP on 51413) Source port: 27435 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 27435 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 104.28.159.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-20 00:39:56 (3 days ago)	Blocked by UFW (TCP on 51413) Source port: 28618 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 28618 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 104.28.159.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-06-19 17:23:10 (3 days ago)	monitor: on VM-0-7-ubuntu \| port: 50152 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 50152 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇹 VHosting	2026-04-26 08:58:30 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇨🇭 backslash	2026-04-20 20:54:03 (2 months ago)		DDoS Attack
🇨🇭 Origon	2026-01-09 12:37:41 (5 months ago)	postfix-non-smtp-command - IP: 104.28.159.1 - time="2026-01-09T13:37:41+01:00" level=info msg="(555 ... show more postfix-non-smtp-command - IP: 104.28.159.1 - time="2026-01-09T13:37:41+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-non-smtp-command by ip 104.28.159.1 (US/13335) : 4h ban on Ip 104.28.159.1" module=db show less	Email Spam
🇩🇪 Packets-Decreaser.NET	2025-06-18 10:56:42 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-05-25 12:34:37 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 Study Bitcoin 🤗	2024-11-05 13:02:15 (1 year ago)	Port probe to tcp/8 (unassigned) [srv127]	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2405:201:5804:29cd:1dae:2de2:1df2:cd98

🇺🇸 209.141.51.192

🇩🇪 195.230.103.245

🇺🇸 162.216.150.47

🇨🇦 85.217.149.59

🇸🇬 68.183.229.3

🇺🇸 65.49.1.105

🇬🇧 35.203.211.248

🇬🇧 35.203.210.59

🇺🇸 20.98.164.46

🇨🇳 222.176.201.40

🇺🇸 162.144.195.114

🇵🇰 154.192.115.35

🇫🇮 147.185.133.140

🇫🇮 147.185.133.16

🇨🇳 106.13.114.161

🇫🇷 83.202.23.239

🇱🇹 62.60.130.235

🇲🇾 47.254.195.238

🇨🇳 14.29.214.161