JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.162.58

104.28.162.58 was found in our database!

This IP was reported 401 times. Confidence of Abuse is 78%: ?

78%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇩🇪 Germany
City	Dreieich, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.162.58

Whois 104.28.162.58

IP Abuse Reports for 104.28.162.58:

This IP address has been reported a total of 401 times from 95 distinct sources. 104.28.162.58 was first reported on August 27th 2024, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-22 06:47:37 (6 hours ago)	Blocked by UFW (TCP on 59558) Source port: 16137 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 59558) Source port: 16137 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 104.28.162.58) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kosada.com	2026-07-16 14:29:39 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 EvoX	2026-07-16 08:46:30 (6 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 2053 [2] TCP	Port Scan
🇺🇸 xmission.com	2026-07-13 21:21:18 (1 week ago)	Blocked by UFW (TCP on 56574) Source port: 15140 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 56574) Source port: 15140 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 104.28.162.58) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 jay hung	2026-07-12 11:55:13 (1 week ago)	2026-07-12T11:55:12.717231+00:00 quarktech kernel: [2501972.250789] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-12T11:55:12.717231+00:00 quarktech kernel: [2501972.250789] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=104.28.162.58 DST=172.237.20.248 LEN=60 TOS=0x00 PREC=0x40 TTL=45 ID=7252 DF PROTO=TCP SPT=23321 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 sgofferj	2026-07-10 10:21:36 (1 week ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
Anonymous	2026-07-09 11:41:01 (1 week ago)	...	Brute-Force
🇬🇧 itpro	2026-07-09 02:50:51 (1 week ago)	[2026-07-09 03:50:50] NOTICE[1041470] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"'1001 ... show more [2026-07-09 03:50:50] NOTICE[1041470] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"'1001'" <sip:[email protected]>' failed for '104.28.162.58:31498' (callid: 2f2f96408944c28d-reg) - Failed to authenticate [2026-07-09 03:50:50] SECURITY[1041511] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2026-07-09T03:50:50.493+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="1001",SessionID="2f2f96408944c28d-reg",LocalAddress="IPV4/TLS/87.106.54.147/5061",RemoteAddress="IPV4/TLS/104.28.162.58/31498" [2026-07-09 03:50:50] SECURITY[1041511] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2026-07-09T03:50:50.493+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="2f2f96408944c28d-reg",LocalAddress="IPV4/TLS/87.106.54.147/5061",RemoteAddress="IPV4/TLS/104.28.162.58/31498",Challenge="1783565450/ee05bc5727b8660b460526c3bae5d84d",Response="9d33f231e651a0604cb33747f580f6f6",ExpectedResponse="" ... show less	Brute-Force
🇫🇷 smtp.com.es	2026-07-07 06:41:09 (2 weeks ago)	Brute force attempt.	Brute-Force Email Spam
🇩🇪 conseilgouz	2026-07-06 16:54:16 (2 weeks ago)	vew-Joomla User : try to access forms...	Hacking
Anonymous	2026-07-06 13:10:55 (2 weeks ago)	2026-07-06T15:10:54.451040+02:00 soli-gate postfix/submission/smtpd[1838620]: warning: unknown[104.2 ... show more 2026-07-06T15:10:54.451040+02:00 soli-gate postfix/submission/smtpd[1838620]: warning: unknown[104.28.162.58]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇺🇸 kosada.com	2026-07-06 07:37:52 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 debaba	2026-07-04 07:00:27 (2 weeks ago)	[04/Jul/2026:07:00:26.950851 +0000] akivitI6tZoyeSu07VIIcwAAABI 104.28.162.58 60538 127.0.0.1 7080 [ ... show more [04/Jul/2026:07:00:26.950851 +0000] akivitI6tZoyeSu07VIIcwAAABI 104.28.162.58 60538 127.0.0.1 7080 [04/Jul/2026:07:00:26.972506 +0000] akivitI6tZoyeSu ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 02:27:56 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.28.162.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.28.162.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 22:27:53.319752 2026] [security2:error] [pid 469:tid 469] [client 104.28.162.58:19162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sekizinci.com"] [uri "/.env.local.orig"] [unique_id "akhvqU2lnRGoCJHE82raXQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-07-03 23:22:57 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 401 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 185.246.128.133

🇭🇳 185.114.55.32

🇨🇳 183.203.166.119

🇸🇬 101.47.14.46

🇮🇶 31.7.86.142

🇮🇳 223.181.96.230

🇰🇷 218.149.228.135

🇫🇷 173.212.230.208

🇧🇷 170.0.62.173

🇨🇳 117.79.226.11

🇨🇦 85.217.149.72

🇺🇸 74.125.183.156

🇧🇩 43.224.111.13

🇸🇬 2600:3c15::2000:edff:fec2:f45d

🇩🇪 194.13.82.196

🇻🇳 171.231.193.177

🇮🇩 160.187.174.22

🇺🇸 146.190.112.200

🇮🇩 103.143.12.43

🇺🇸 66.132.172.132