Total reports
4 from
3 distinct
reporters
First reported
November 12th 2026
Most recent report
4 hours ago
Last 60 days
Top reporter locations
🇩🇪
Germany
2
🇳🇱
Netherlands
2
Most common categories
Web App Attack
3
Hacking
2
Bad Web Bot
2
Brute-Force
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-11-13 07:28:50
UTC ·
(4 hours ago)
[redacted] 104.28.162.66 - - [13/Nov/2026:08:28:39 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
[redacted] 104.28.162.66 - - [13/ ...
show more
[redacted] 104.28.162.66 - - [13/Nov/2026:08:28:39 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
[redacted] 104.28.162.66 - - [13/Nov/2026:08:28:41 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36"
[redacted] 104.28.162.66 - - [13/Nov/2026:08:28:42 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0"
[redacted] 104.28.162.66 - - [13/Nov/2026:08:28:43 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0"
[redacted] 104.28.162.66 - - [13/Nov/2026:08:28:44 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Macin
...
show less
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-13 06:54:03
UTC ·
(4 hours ago)
[ti-01ov] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail <name>. Example: 104.28.162.66 - - \[13/Nov/2026:07:53:30 +0100\] "POST /xmlrpc.php HTTP/1.1" 403 7225 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWeb ...
show more
[ti-01ov] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail <name>. Example: 104.28.162.66 - - \[13/Nov/2026:07:53:30 +0100\] "POST /xmlrpc.php HTTP/1.1" 403 7225 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/90.0.4430.93 Safari/537.36"
104.28.162.66 - - \[13/Nov/2026:07:53:42 +0100\] "POST /xmlrpc.php HTTP/1.1" 403 7225 "-" "Mozilla/5.0 \(Linux\; Android 11\; Nokia G50\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/123.0.6312.61 Mobile Safari/537.36"
104.28.162.66 - - \[13/Nov/2026:07:53:48 +0100\] "POST /xmlrpc.php HTTP/1.1" 403 7225 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/92.0.4515.107 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-11-13 00:00:52
UTC ·
(11 hours ago)
-.nl:443 104.28.162.66 - - [13/Nov/2026:01:00:44 +0100] -.nl "GET /.git/config HTTP/1.1" 404 6661 "https://www.google.com/search?q=-.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1. ...
show more
-.nl:443 104.28.162.66 - - [13/Nov/2026:01:00:44 +0100] -.nl "GET /.git/config HTTP/1.1" 404 6661 "https://www.google.com/search?q=-.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
show less
Bad Web Bot
2026-11-12 22:52:05
UTC ·
(12 hours ago)
[redacted] 104.28.162.66 - - [12/Nov/2026:23:51:30 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
[redacted] 104.28.162.66 - - [12/ ...
show more
[redacted] 104.28.162.66 - - [12/Nov/2026:23:51:30 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
[redacted] 104.28.162.66 - - [12/Nov/2026:23:51:33 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0"
[redacted] 104.28.162.66 - - [12/Nov/2026:23:51:37 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Linux; Android 11; Nokia G50) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.61 Mobile Safari/537.36"
[redacted] 104.28.162.66 - - [12/Nov/2026:23:51:41 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
[redacted] 104.28.162.66 - - [12/Nov/2026:23:51:45 +0100] "POST /xmlrpc.php HTTP/2.0" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/
...
show less
Hacking
Web App Attack
