104.28.159.140

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
210 reports
115 reporters · latest 2 months ago
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
Hounslow, England
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

104.28.159.140 has been reported 210 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
210 from 115 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 FD-IX
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot Web App Attack
Anonymous
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇳🇱 e.fierstra
ModSecurity hits exceeded
Bad Web Bot Web App Attack
🇳🇱 e.fierstra
ModSecurity hits exceeded
Bad Web Bot Web App Attack
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇺🇸 xmission.com
Blocked by UFW (TCP on 123) Source port: 40264 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 104.28.159.140) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇨🇿 Honzas
Brute Force SMTP AUTH Attack
Brute-Force
🇺🇸 xmission.com
Blocked by UFW (TCP on 123) Source port: 26601 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.28.159.140) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 smtp.com.es
Brute force attempt.
Brute-Force Email Spam
🇨🇭 Origon
Email Spam
🇨🇭 Origon
Email Spam
🇷🇴 iulianh
25,465,587
Brute-Force SSH
🇫🇷 Thaliruth
104.28.159.140 - - [19/Apr/2026:07:56:48 +0200] "GET /wp-content/plugins/Shelly/Shelly.php HTTP/1.1" 404 282 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.5" ...
Brute-Force Web App Attack
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01,ice02,wa01]
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 196.251.121.158
🇩🇪 193.124.20.231
🇦🇷 190.55.123.51
🇦🇷 181.26.162.152
🇦🇷 132.255.113.175
🇧🇩 103.124.110.113
🇺🇸 99.109.140.103
🇺🇸 98.195.36.174
🇺🇸 45.3.37.65
🇪🇸 34.175.46.237
🇰🇷 1.234.63.220
🇺🇸 188.213.202.10
🇳🇱 185.246.188.74
🇧🇷 177.87.33.134
🇺🇸 173.46.91.4
🇺🇸 165.227.75.154
🇩🇪 139.162.170.116
🇵🇭 122.54.133.213
🇲🇾 120.141.19.237
🇱🇦 103.43.77.14
feedback