104.28.159.41

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
23 reports
16 reporters · latest 1 month ago
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇦🇹 Austria
City
Bruck an der Leitha, Lower Austria
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 1
Most common categories Exploited Host 1 Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇿 unhfree.net
Brute-Force Exploited Host
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force
🇩🇪 conseilgouz
ave-Joomla Admin : try to force the door...
Hacking
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse
HTTP flood against /retreat-corp on Apache webserver
Brute-Force
🇮🇳 dineshskt4all
Jun 15 21:39:36 server named[2187527]: client @0x78c961450158 104.28.159.41#26478 (downloads.paloaltonetworks.com): query (cache) 'downloads.paloaltonetworks.com/A/IN' denied (allow-query-cache did not match) ...
Port Scan
🇩🇪 Roper123
Unauthorized DNS request
Brute-Force
🇺🇸 gumbysoft
DNS open resolver scan
Port Scan
🇹🇼 tye
Wazuh Alert Evidence: Jun 15 15:20:14 pico-gw1 named[4050566]: client @0xffff800133f8 104.28.159.41#41254 (updates.paloaltonetworks.com): query (cache) 'updates.paloaltonetworks.com/A/IN' denied (allow-query-cache did not match)
Hacking
🇮🇹 LTM
DNS - Multiple recursive query request denied
DNS Poisoning Hacking
🇺🇸 LockBlock
2026-03-23 22:56:09: Minecraft server scan detected from 104.28.159.41 on port 25565 of racknerd-e7e1a9
Port Scan
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇺🇸 MPL
tcp/443 (8 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 202.101.144.44
🇬🇧 195.96.139.223
🇺🇸 167.253.17.20
🇫🇷 140.248.41.40
🇳🇱 109.160.32.157
🇬🇧 86.38.236.24
🇹🇷 78.188.184.119
🇮🇶 62.201.228.210
🇧🇷 200.151.173.151
🇲🇾 175.141.172.237
🇺🇸 136.144.35.59
🇳🇱 109.160.32.155
🇷🇺 94.25.111.36
🇫🇮 80.223.201.173
🇳🇱 77.239.124.76
🇺🇸 72.48.41.219
🇺🇸 57.154.242.110
🇲🇲 45.41.106.231
🇬🇧 18.175.130.31
🇺🇸 184.105.139.88
feedback