JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.160.166

104.28.160.166 was found in our database!

This IP was reported 682 times. Confidence of Abuse is 61%: ?

61%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.160.166

Whois 104.28.160.166

IP Abuse Reports for 104.28.160.166:

This IP address has been reported a total of 682 times from 351 distinct sources. 104.28.160.166 was first reported on February 4th 2024, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-06-03 09:11:01 (23 hours ago)	trying wp-login.php/xmlrpc.php 48 times in 1 minutes	Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-06-03 09:00:03 (23 hours ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇩🇪 Lino Project	2026-06-03 08:56:07 (23 hours ago)	104.28.160.166 - - [03/Jun/2026:10:56:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 566 "-" "Mozilla/5.0 ... show more 104.28.160.166 - - [03/Jun/2026:10:56:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.120 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-06-03 05:00:42 (1 day ago)	User login to application from malicious IP 104.28.160.166.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 104.28.160.166.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-03 04:00:11 (1 day ago)	User login to application from malicious IP 104.28.160.166.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 104.28.160.166.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-25 13:00:39 (1 week ago)	User login to application from malicious IP 104.28.160.166.. Threat Score: 3.5/10 (LOW). Confidence: ... show more User login to application from malicious IP 104.28.160.166.. Threat Score: 3.5/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-25 12:00:46 (1 week ago)	User login to application from malicious IP 104.28.160.166.. Threat Score: 3.6/10 (LOW). Confidence: ... show more User login to application from malicious IP 104.28.160.166.. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-25 11:00:38 (1 week ago)	User login to application from malicious IP 104.28.160.166.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 104.28.160.166.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-25 10:00:11 (1 week ago)	User login to application from malicious IP 104.28.160.166.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 104.28.160.166.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇨🇿 ptlab	2026-05-16 20:45:05 (2 weeks ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇺🇸 nyt	2026-05-16 19:37:11 (2 weeks ago)	WP Author Enumeration, WP User Enumeration	Web App Attack
🇫🇷 masterguru	2026-05-16 00:19:01 (2 weeks ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-195)	Hacking
🇮🇩 sockominfo	2026-05-11 15:00:12 (3 weeks ago)	User login to application from malicious IP 104.28.160.166.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 104.28.160.166.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-10 15:00:39 (3 weeks ago)	User login to application from malicious IP 104.28.160.166.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 104.28.160.166.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-10 14:00:15 (3 weeks ago)	User login to application from malicious IP 104.28.160.166.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 104.28.160.166.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 682 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 163.5.241.53

🇭🇰 123.58.213.20

🇮🇩 103.151.37.248

🇷🇴 89.37.117.16

🇺🇸 70.184.145.66

🇳🇱 195.178.110.30

🇦🇿 188.253.209.96

🇩🇪 172.71.144.30

🇺🇸 162.216.150.159

🇺🇸 147.185.132.182

🇮🇩 103.151.37.252

🇺🇸 64.62.156.176

🇦🇱 46.252.33.253

🇳🇱 45.148.10.151

🇺🇸 31.132.54.217

🇭🇰 8.217.208.71

🇭🇰 8.217.180.93

🇨🇳 220.168.118.133

🇵🇾 186.158.200.187

🇫🇷 185.208.207.227