104.28.162.125

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
42 reports
26 reporters · latest 1 month ago
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇧🇷 Brazil
City
Angra dos Reis, Rio de Janeiro
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
42 from 26 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 1
Most common categories Hacking 1 Brute-Force 1 Port Scan 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
🇺🇸 MPL
tcp ports: 23,22 (16 or more attempts)
Port Scan
Anonymous
"GET //wp-json HTTP/1.1"
Hacking Web App Attack
Anonymous
Hacking Web App Attack
🇧🇷 chronos
Generic malicious activity: Tentativa de varredura de porta TCP... | Port: 59601 | Proto: TCP | Location: Brazil, Iguaçu
Port Scan Hacking
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇳🇴 jad-abuse
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 1 hits.
Brute-Force Web App Attack
🇺🇸 OceanTreasure
tcp/443; WordPress XML-RPC brute force attempt: "POST /xmlrpc.php" @ 2026-07-09T22:00:31Z [proxy]
Brute-Force
🇫🇷 masterguru
(xmlrpc) Apache: Failed xmlrpc access from 104.28.162.125 (CA/Canada/-): 10 in the last 3600 secs (0-201)
Hacking
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇲🇾 Rizzy
Multiple WAF Violations
Brute-Force Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking Web App Attack
🇧🇷 chronos
Generic malicious activity: Tentativa de varredura de porta TCP... | Port: 59601 | Proto: TCP | Location: Brazil, Iguaçu
Port Scan Hacking
🇧🇷 chronos
Generic malicious activity: Tentativa de varredura de porta TCP... | Port: 59601 | Proto: TCP | Location: Brazil, Iguaçu
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 175.209.156.146
🇸🇪 104.22.219.110
🇵🇰 101.53.255.255
🇺🇸 70.91.135.181
🇳🇱 45.148.10.141
🇷🇺 94.25.40.30
🇰🇷 218.238.5.110
🇳🇱 172.211.56.214
🇨🇳 140.246.137.102
🇹🇷 78.190.133.81
🇳🇱 77.239.124.46
🇧🇷 69.6.221.18
🇺🇸 66.132.186.242
🇮🇱 34.165.192.12
🇿🇦 197.234.242.92
🇺🇸 195.63.15.179
🇺🇸 195.63.15.116
🇺🇸 195.63.14.239
🇺🇸 195.63.14.233
🇺🇸 195.63.14.202
feedback