JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.159.47

104.28.159.47 was found in our database!

This IP was reported 231 times. Confidence of Abuse is 84%: ?

84%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.159.47

Whois 104.28.159.47

IP Abuse Reports for 104.28.159.47:

This IP address has been reported a total of 231 times from 106 distinct sources. 104.28.159.47 was first reported on March 18th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-07 04:27:19 (1 day ago)	Blocked by UFW (TCP on 11110) Source port: 18603 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 11110) Source port: 18603 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.28.159.47) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Carl	2026-06-05 23:50:08 (2 days ago)	Aggressive web scan	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-06-05 21:31:38 (2 days ago)	104.28.159.47 - - [06/Jun/2026:00:31:21 +0300] "GET /administrator/administrator/index.php HTTP/1.1" ... show more 104.28.159.47 - - [06/Jun/2026:00:31:21 +0300] "GET /administrator/administrator/index.php HTTP/1.1" 404 3373 "http://journal.sops.gov.ua/administrator/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 104.28.159.47 - - [06/Jun/2026:00:31:37 +0300] "GET /administrator/administrator/index.php HTTP/1.1" 404 3290 "http://journal.sops.gov.ua/administrator/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" ... show less	Web App Attack
🇳🇱 Fr13nds.Tech	2026-06-05 10:56:52 (2 days ago)	104.28.159.47 - - [05/Jun/2026:12:56:49 0200] "POST /wp-login.php HTTP/1.0" 200 11963 "-" "Mozilla/ ... show more 104.28.159.47 - - [05/Jun/2026:12:56:49 0200] "POST /wp-login.php HTTP/1.0" 200 11963 "-" "Mozilla/5.0" 104.28.159.47 - - [05/Jun/2026:12:56:48 0200] "POST /wp-login.php HTTP/1.0" 200 11965 "-" "Mozilla/5.0" 104.28.159.47 - - [05/Jun/2026:12:56:49 0200] "POST /wp-login.php HTTP/1.0" 200 11961 "-" "Mozilla/5.0" 104.28.159.47 - - [05/Jun/2026:12:56:49 0200] "POST /wp-login.php HTTP/1.0" 200 11963 "-" "Mozilla/5.0" 104.28.159.47 - - [05/Jun/2026:12:56:49 0200] "POST /wp-login.php HTTP/1.0" 200 11961 "-" "Mozilla/5.0" show less	Brute-Force Web App Attack
🇺🇸 xmission.com	2026-06-04 05:54:19 (3 days ago)	Blocked by UFW (TCP on 11110) Source port: 17651 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 11110) Source port: 17651 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.28.159.47) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ger-stg-sifi1	2026-06-03 05:19:07 (5 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 xmission.com	2026-06-02 01:48:39 (6 days ago)	Blocked by UFW (TCP on 11110) Source port: 17155 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 11110) Source port: 17155 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.28.159.47) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 solution.it	2026-05-26 06:28:25 (1 week ago)	[Tue May 26 08:28:24.460834 2026] [php7:error] [pid 2641537:tid 2641537] [client 104.28.159.47:28265 ... show more [Tue May 26 08:28:24.460834 2026] [php7:error] [pid 2641537:tid 2641537] [client 104.28.159.47:28265] script '/var/www/html/wp-login.php' not found or unable to stat, referer: http://solution.it show less	Web App Attack
🇺🇸 lostswordfish.com	2026-05-26 05:56:04 (1 week ago)	Wordfence waf block on fairregistry	Web App Attack
Anonymous	2026-05-25 22:58:16 (1 week ago)	(wordpress) Failed wordpress login from 104.28.159.47 (SG/Singapore/-)	Brute-Force
🇩🇪 ardexter	2026-05-22 20:08:45 (2 weeks ago)	Wordpress attack and DDOS	DDoS Attack Web App Attack
🇲🇾 Rizzy	2026-05-21 23:07:02 (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-05-21 00:49:01 (2 weeks ago)	104.28.159.47 - - [21/May/2026:02:40:31 +0200] "POST /wp-login.php HTTP/1.0" 200 2579 "-" "Mozilla/5 ... show more 104.28.159.47 - - [21/May/2026:02:40:31 +0200] "POST /wp-login.php HTTP/1.0" 200 2579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 104.28.159.47 - - [21/May/2026:02:40:33 +0200] "POST /wp-login.php HTTP/1.1" 200 2041 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 104.28.159.47 - - [21/May/2026:02:45:08 +0200] "POST /wp-login.php HTTP/1.0" 200 2579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 104.28.159.47 - - [21/May/2026:02:45:08 +0200] "POST /wp-login.php HTTP/1.1" 200 2041 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 104.28.159.47 - - [21/May/2026:02:49:00 +0200] "POST /wp-login.php HTTP/1.0" 200 2579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" ... show less	Brute-Force Web App Attack
🇩🇪 abdubhai	2026-05-18 19:14:05 (2 weeks ago)	104.28.159.47 - - [19/May/2026:0 ...	Brute-Force
Anonymous	2026-05-18 16:10:04 (2 weeks ago)	(wordpress) Failed wordpress login from 104.28.159.47 (SG/Singapore/-/Singapore/-/[redacted])	Brute-Force

Showing 1 to 15 of 231 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 173.249.0.223

🇦🇱 104.243.247.201

🇭🇰 103.210.237.224

🇮🇳 59.92.50.157

🇷🇴 2.57.121.25

🇺🇸 2604:a940:301:225:0:7::

🇧🇪 198.235.24.192

🇧🇬 193.24.211.107

🇫🇮 157.22.17.119

🇨🇳 112.102.84.222

🇺🇿 84.54.70.157

🇺🇸 44.195.155.196

🇮🇩 36.77.161.195

🇺🇸 34.75.97.236

🇳🇱 195.178.110.30

🇺🇸 193.19.109.116

🇧🇩 182.48.76.156

🇨🇳 180.166.178.20

🇩🇪 165.232.125.188

🇩🇪 141.11.187.21