104.28.159.157
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇹🇼 Taiwan
- City
- Neili, Taiwan
Abuse Reports
Total reports
33 from
23 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 ACE-INFORMATIQUE.NC |
Web App Attack blocked by Fail2ban
|
Web App Attack | |
| 🇩🇪 Séfora Srl |
Failed attempt detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack | |
| 🇨🇭 copestack |
Honeypot hit on ov-9acb4e (fail2ban jail: nginx-compat)
|
Web App Attack | |
| 🇳🇱 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-ams6-1)
|
Hacking Bad Web Bot | |
| 🇪🇸 GranTech |
104.28.159.157 - - [06/Nov/2026:14:01:56 +0000] "GET /.env.dev.local HTTP/1.1" 400 72504 "-" "Mozilla/5.0 (Linux; Android 15; Pixel 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.4702.19 Mobile Safari/537.36 EdgA/105.0.4702.19"
...
|
Web App Attack | |
| 🇩🇪 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)
|
Hacking Bad Web Bot | |
| 🇺🇸 chronos |
|
DDoS Attack Phishing Web Spam Blog Spam Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| Anonymous |
104.28.159.157 - [CN: TWN] [05/Nov/2026:11:18:00 -0300] "GET /api/.env HTTP/1.1" Dest:Port 443 HTTP_Status: 403
...
|
Web App Attack | |
| 🇺🇸 ISPLtd |
Oct 14 04:14:25 104.28.159.157 TCP SPT=64283 DPT=1111 SYN
Oct 14 04:14:26 104.28.159.157 TCP SPT=64283 DPT=1111 SYN
Oct 14 04:14:27 104.28.159.157 TCP SPT=64283 DPT=1111
...
|
Port Scan | |
| 🇨🇭 backslash |
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
|
Bad Web Bot | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1)
Source port: 17237
TTL: 54
Packet length: 60
TOS: 0x08
This report (for 104.28.159.157) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 ras07 |
Brute force SMTP/IMAP login attempts.
|
Brute-Force | |
| 🇹🇼 ashiyasayo |
Detected extremely high-frequency attack activity, persistent malicious actor, persistent activity observed over, days.
|
Web App Attack | |
| Anonymous |
Failed login attempt detected by Fail2Ban in plesk-postfix jail
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown