JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.163.234

104.28.163.234 was found in our database!

This IP was reported 161 times. Confidence of Abuse is 92%: ?

92%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.163.234

Whois 104.28.163.234

IP Abuse Reports for 104.28.163.234:

This IP address has been reported a total of 161 times from 84 distinct sources. 104.28.163.234 was first reported on April 8th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 WeekendWeb	2026-06-28 14:57:58 (3 days ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 rsiddall	2026-06-25 20:55:44 (6 days ago)	104.28.163.234 - - [25/Jun/2026:16:52:40 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "-" "Mozilla/ ... show more 104.28.163.234 - - [25/Jun/2026:16:52:40 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0" 104.28.163.234 - - [25/Jun/2026:16:53:25 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0" 104.28.163.234 - - [25/Jun/2026:16:54:58 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0" 104.28.163.234 - - [25/Jun/2026:16:54:58 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0" 104.28.163.234 - - [25/Jun/2026:16:55:41 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0" 104.28.163.234 - - [25/Jun/2026:16:55:43 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0" ... show less	Brute-Force
🇦🇺 FireGuard Server	2026-06-20 12:15:07 (1 week ago)	Blocked by OPNsense firewall; 8 hits, proto=tcp, ports=443	Port Scan Hacking
🇺🇸 kosada.com	2026-06-20 10:16:49 (1 week ago)	Web vulnerability probing: /wp-admin/	Web App Attack
🇫🇷 rellik	2026-06-20 09:48:00 (1 week ago)	Mass Admin Connection Attempts	Hacking Brute-Force Web App Attack
Anonymous	2026-06-19 06:13:15 (1 week ago)	Blocked by ModSec and CSF	Port Scan
🇫🇷 masterguru	2026-06-19 05:36:27 (1 week ago)	(xmlrpc) Apache: Failed xmlrpc access from 104.28.163.234 (IE/Ireland/-): 10 in the last 3600 secs ( ... show more (xmlrpc) Apache: Failed xmlrpc access from 104.28.163.234 (IE/Ireland/-): 10 in the last 3600 secs (0-193) show less	Hacking
🇨🇦 Carl	2026-06-18 10:41:11 (1 week ago)	Aggressive web scan	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-18 01:00:53 (2 weeks ago)	User login to application from malicious IP 104.28.163.234.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 104.28.163.234.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-18 00:01:01 (2 weeks ago)	User login to application from malicious IP 104.28.163.234.. Threat Score: 4/10 (MEDIUM). Confidence ... show more User login to application from malicious IP 104.28.163.234.. Threat Score: 4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇹🇷 baku.hosting	2026-06-17 02:09:17 (2 weeks ago)	CSF Auto Report: (cpanel) Failed cPanel login from 104.28.163.234 (IE/Ireland/-): 4 in the last 3600 ... show more CSF Auto Report: (cpanel) Failed cPanel login from 104.28.163.234 (IE/Ireland/-): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇮🇩 sockominfo	2026-06-17 00:00:57 (2 weeks ago)	User login to application from malicious IP 104.28.163.234.. Threat Score: 4/10 (MEDIUM). Confidence ... show more User login to application from malicious IP 104.28.163.234.. Threat Score: 4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
Anonymous	2026-06-16 05:03:28 (2 weeks ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇵🇱 lns.bz	2026-06-16 00:22:01 (2 weeks ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
Anonymous	2026-06-15 19:13:34 (2 weeks ago)	[ssd5.kdns.gr] httpd-xmlrpc-post: sites=dentallaboratory.gr; logs=/var/log/httpd/domains/dentallabor ... show more [ssd5.kdns.gr] httpd-xmlrpc-post: sites=dentallaboratory.gr; logs=/var/log/httpd/domains/dentallaboratory.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.154.158.195

🇭🇰 194.187.178.57

🇬🇧 193.163.125.242

🇩🇪 185.201.138.201

🇯🇵 172.253.236.19

🇧🇷 172.71.238.196

🇺🇸 172.71.170.126

🇻🇳 171.244.142.4

🇺🇸 159.223.153.51

🇮🇳 66.116.224.161

🇲🇾 49.124.152.229

🇫🇮 2a00:1450:4010:c1c::12d

🇬🇧 217.146.80.106

🇧🇪 198.235.24.204

🇫🇮 194.99.26.248

🇺🇸 173.249.147.146

🇫🇮 147.185.133.141

🇻🇳 118.70.146.143

🇺🇸 107.175.109.204

🇮🇳 106.219.120.174