JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.28.162.240

Activity Trending Down

Abuse Confidence Score

11% Caution

93 reports

33 reporters · latest 1 month ago

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇮🇹 Italy
City: Gallarate, Lombardy

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

93 from 33 distinct reporters

First reported

December 1st 2024

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 2 🇨🇿 Czechia 1 🇫🇷 France 1

Most common categories Hacking 3 Brute-Force 1 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 unhfree.net	2026-10-08 00:22:15 UTC · (1 month ago)	Oct 8 02:22:14 canopus postfix/smtpd[3789249]: NOQUEUE: reject: RCPT from unknown[104.28.162.240]: 554 5.7.1 Service unavailable; Client host [104.28.162.240] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/104 ... show more Oct 8 02:22:14 canopus postfix/smtpd[3789249]: NOQUEUE: reject: RCPT from unknown[104.28.162.240]: 554 5.7.1 Service unavailable; Client host [104.28.162.240] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/104.28.162.240; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<127.0.0.1> Oct 8 02:22:14 canopus postfix/smtpd[3789249]: NOQUEUE: reject: RCPT from unknown[104.28.162.240]: 554 5.7.1 Service unavailable; Client host [104.28.162.240] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/104.28.162.240; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<127.0.0.1> Oct 8 02:22:14 canopus postfix/smtpd[3789249]: NOQUEUE: reject: RCPT from unknown[104.28.162.240]: 554 5.7.1 Service unavailable; Client host [104.28.162.240] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/104.28.162.240; from=<[email protected]> to=<dofreal68@hotmail. ... show less	Brute-Force Exploited Host
🇫🇷 ap_ram	2026-09-21 19:35:19 UTC · (1 month ago)	mae-Joomla Admin : try to force the door...	Hacking
🇳🇱 pixelXp	2026-09-21 10:47:54 UTC · (1 month ago)	Reason:15 (Hacking), Via: www.bomenrooien.com/index-ajax.php, Message: Blocked URL pattern: 'index-ajax.php'. [POST] Gevaarlijk woord 'EVAL' in Value in 'search' [+35]; Gevaarlijk woord 'eval' in Value in &#039 ... show more Reason:15 (Hacking), Via: www.bomenrooien.com/index-ajax.php, Message: Blocked URL pattern: 'index-ajax.php'. [POST] Gevaarlijk woord 'EVAL' in Value in 'search' [+35]; Gevaarlijk woord 'eval' in Value in 'ucfg' [+35]; Verdachte string 'base64_decode' in Value in 'ucfg' [+20]; Verdachte Base64 content: [ show less	Hacking
🇳🇱 pixelXp	2026-09-20 01:35:32 UTC · (1 month ago)	Reason:15 (Hacking), Via: www.varmlandsgarden.com/index-ajax.php, Message: Blocked URL pattern: 'index-ajax.php'. [POST] Gevaarlijk woord 'EVAL' in Value in 'search' [+35]; Gevaarlijk woord 'eval' in Value in & ... show more Reason:15 (Hacking), Via: www.varmlandsgarden.com/index-ajax.php, Message: Blocked URL pattern: 'index-ajax.php'. [POST] Gevaarlijk woord 'EVAL' in Value in 'search' [+35]; Gevaarlijk woord 'eval' in Value in 'ucfg' [+35]; Verdachte string 'base64_decode' in Value in 'ucfg' [+20]; Verdachte Base64 content: [ show less	Hacking
🇨🇭 pingusurmars	2026-09-12 14:40:17 UTC · (2 months ago)	Blocked by UFW on ampereone [35706/tcp] Source port: 44852 TTL: 48 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇨🇦 celestialcity	2026-09-12 14:40:00 UTC · (2 months ago)	Blocked by UFW on celestialcityna [35706/tcp] \| SPT: 13236 \| TTL: 40 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇦🇺 screwlooseit.com.au	2026-08-05 12:22:13 UTC · (3 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/-	Web App Attack
🇺🇸 interbiznw.com	2026-08-02 18:58:13 UTC · (3 months ago)	fail2ban-ban	Hacking Brute-Force Exploited Host Web App Attack
🇦🇺 afleventoffice.com.au	2026-07-28 08:38:31 UTC · (3 months ago)	GET /deaflympics HTTP/1.1	Web App Attack
🇺🇸 kosada.com	2026-07-25 07:45:22 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-07-16 15:23:37 UTC · (3 months ago)	IDS Alert: INTERNAL: VLAN Hopping Attempt === ATTACK === Signature: INTERNAL: VLAN Hopping Attempt \| SID: 7000022 \| Severity: 1 \| Category: Attempted Administrator Privilege Gain === SOURCE === IP: 104.28.162.240 (IPv4) \| Port: 13298 \| Country: Italy ... show more IDS Alert: INTERNAL: VLAN Hopping Attempt === ATTACK === Signature: INTERNAL: VLAN Hopping Attempt \| SID: 7000022 \| Severity: 1 \| Category: Attempted Administrator Privilege Gain === SOURCE === IP: 104.28.162.240 (IPv4) \| Port: 13298 \| Country: Italy \| ISP: CLOUDFLARENET \| rDNS: None === TARGET === Host: goline.ch \| IP: 185.54.81.15 \| Port: 8080 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-07-16 17:23:36 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇺🇸 kosada.com	2026-07-15 17:01:47 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-05 16:19:06 UTC · (4 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-07-04 20:52:35 UTC · (4 months ago)	IDS Alert: INTERNAL: VLAN Hopping Attempt === ATTACK === Signature: INTERNAL: VLAN Hopping Attempt \| SID: 7000022 \| Severity: 1 \| Category: Attempted Administrator Privilege Gain === SOURCE === IP: 104.28.162.240 (IPv4) \| Port: 59792 \| Country: Italy ... show more IDS Alert: INTERNAL: VLAN Hopping Attempt === ATTACK === Signature: INTERNAL: VLAN Hopping Attempt \| SID: 7000022 \| Severity: 1 \| Category: Attempted Administrator Privilege Gain === SOURCE === IP: 104.28.162.240 (IPv4) \| Port: 59792 \| Country: Italy \| ISP: CLOUDFLARENET \| rDNS: None === TARGET === Host: goline.ch \| IP: 185.54.81.15 \| Port: 8080 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-07-04 22:52:34 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇫🇷 Duggy_Tuxy🧱	2026-06-26 09:01:13 UTC · (4 months ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (SSH Attack)	Brute-Force SSH Port Scan

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.32.162.217

🇭🇷 188.129.79.143

🇺🇸 173.79.110.32

🇩🇪 151.243.11.38

🇮🇳 128.185.33.241

🇳🇱 77.239.124.112

🇵🇱 45.138.12.41

🇧🇪 35.206.186.214

🇺🇸 13.57.221.28

🇹🇼 198.235.24.83

🇳🇱 138.226.239.234

🇲🇦 105.76.131.40

🇷🇴 92.118.39.77

🇸🇪 90.230.212.29

🇺🇸 66.27.132.114

🇺🇸 65.49.20.66

🇵🇭 49.149.198.35

🇲🇾 49.124.159.188

🇺🇸 49.51.244.147

🇵🇱 46.149.223.56