104.28.159.107
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇺🇸 United States of America
- City
- Wheaton, Illinois
Abuse Reports
Total reports
261 from
165 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 Smish |
|
Web App Attack | |
| 🇺🇸 Lee Daniel |
|
DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2026-08-20
|
Web App Attack SSH Hacking | |
| 🇫🇷 IRISIO |
scans/SQL injection/spam posts : 2 queries
|
Web App Attack SQL Injection | |
| 🇺🇦 URAN Publishing Service |
[14/Aug/2026:02:52:22 +0300] -- 104.28.159.107 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
|
Bad Web Bot Web App Attack | |
| Anonymous |
104.28.159.107 - - [11/Aug/2026:00:25:27 -0300] "HEAD /wp-config.php.bak HTTP/1.1" 404 0 "-" "-"
...
|
Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host | |
| 🇸🇬 azminawwar |
104.28.159.107 Probing for vulnerable code from 2025-12-07 10:20:22 WIB, evidence: tienabled|0|0|0|azmi.my.id/style.php
|
Web App Attack Hacking | |
| 🇫🇷 pm33 |
Wordpress login attempts
|
Brute-Force | |
| 🇩🇪 Roper123 |
Web exploits
|
Web App Attack | |
| 🇳🇱 ipoac.nl |
|
Bad Web Bot | |
| 🇩🇪 hidemail.app |
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
|
Web App Attack Hacking | |
| Anonymous |
104.28.159.107 - - [04/Aug/2026:14:26:03 +0800] "HEAD /.env.dist HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
|
Bad Web Bot Web App Attack | |
| 🇫🇷 pm33 |
Probing for resource vulnerabilities HTTP(S)
|
Web App Attack | |
| 🇫🇮 kumiko |
[2026-07-30 14:33:34] Probing for dotfiles
"GET /.env.old HTTP/1.1" 301
|
Bad Web Bot Web App Attack | |
| 🇩🇪 IVski.com |
IVski WAF | Sensitive file probe detected - looking for .env
|
Port Scan Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown