JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.164.109

104.28.164.109 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 100%: ?

100%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇹🇷 Turkey
City	Bahcelievler, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.164.109

Whois 104.28.164.109

IP Abuse Reports for 104.28.164.109:

This IP address has been reported a total of 88 times from 50 distinct sources. 104.28.164.109 was first reported on April 5th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-14 05:15:10 (8 hours ago)	Blocked by UFW (TCP on 123) Source port: 49845 TTL: 56 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 123) Source port: 49845 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 104.28.164.109) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 demonsword	2026-06-13 08:15:38 (1 day ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:443 show less	Open Proxy Port Scan
🇺🇦 URAN Publishing Service	2026-06-12 14:51:15 (1 day ago)	104.28.164.109 - - [12/Jun/2026:17:51:15 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme. ... show more 104.28.164.109 - - [12/Jun/2026:17:51:15 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 404 628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" ... show less	Web App Attack
🇧🇷 dominioz	2026-06-12 14:43:36 (1 day ago)	2026-06-12 14:43:21 GET /wp-content/plugins/ninja-forms-uploads/readme.txt - - 104.28.164.109 HTTP/1 ... show more 2026-06-12 14:43:21 GET /wp-content/plugins/ninja-forms-uploads/readme.txt - - 104.28.164.109 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.0+Safari/605.1.15 - 404 1440 2026-06-12 14:43:21 GET /wp-content/plugins/advanced-custom-post-type/changelog.md - - 104.28.164.109 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/101.0.4951.64+Safari/537.36+Edg/101.0.1210.47 - 404 1440 2026-06-12 14:43:23 GET /wp-content/plugins/payment-gateway-pix-for-woocommerce/README.txt - - 104.28.164.109 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+17_2+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.2+Mobile/15E148+Safari/604.1 - 404 1440 2026-06-12 14:43:24 GET /wp-content/plugins/datalogics/README.txt - - 104.28.164.109 HTTP/1.1 Mozilla/5.0+(Linux;+Android+10;+K)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Mobile+Safari/537.36 - 404 1440 ... show less	Web App Attack
Anonymous	2026-06-12 13:15:22 (2 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇧🇾 lns.bz	2026-06-12 13:06:25 (2 days ago)	Too many 404 requests [BY]	Web App Attack
🇹🇭 thaizone.com	2026-06-12 13:02:13 (2 days ago)	Brute Force Attack on a Web Resources #2	DDoS Attack Web Spam Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-06-12 10:50:29 (2 days ago)	104.28.164.109 - - [12/Jun/2026:13:50:28 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme. ... show more 104.28.164.109 - - [12/Jun/2026:13:50:28 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 404 628 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" ... show less	Web App Attack
🇺🇸 Lee Daniel	2026-06-12 10:44:16 (2 days ago)	104.28.164.109 - - [12/Jun/2026:06:43:32 -0400] "GET /wp-content/plugins/datalogics/README.txt HTTP/ ... show more 104.28.164.109 - - [12/Jun/2026:06:43:32 -0400] "GET /wp-content/plugins/datalogics/README.txt HTTP/1.1" 404 40744 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 104.28.164.109 - - [12/Jun/2026:06:43:40 -0400] "GET /wp-content/plugins/wedesigntech-ultimate-booking-addon/changelog.txt HTTP/1.1" 404 40744 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1" 104.28.164.109 - - [12/Jun/2026:06:43:42 -0400] "GET /wp-content/plugins/s2member/readme.txt HTTP/1.1" 404 40744 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.58 Mobile Safari/537.36" 104.28.164.109 - - [12/Jun/2026:06:44:04 -0400] "GET /wp-content/plugins/profile-builder/readme.txt HTTP/1.1" 404 40744 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/53 ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-12 04:37:12 (2 days ago)	Bot / seems abusive / Apache connections: 25	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-06-12 04:32:03 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇫🇷 masterguru	2026-06-12 04:02:13 (2 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.28.164.109 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.28.164.109 (CA/Canada/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-06-12 03:33:19 (2 days ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
🇺🇦 URAN Publishing Service	2026-06-12 03:31:16 (2 days ago)	104.28.164.109 - - [12/Jun/2026:06:31:15 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme. ... show more 104.28.164.109 - - [12/Jun/2026:06:31:15 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 404 628 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.58 Mobile Safari/537.36" ... show less	Web App Attack
🇩🇪 LRob.fr	2026-06-12 03:30:05 (2 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇫🇷 185.194.178.63

🇩🇪 18.184.76.242

🇵🇦 190.32.246.14

🇮🇳 182.95.231.82

🇧🇷 177.84.28.154

🇰🇷 118.194.249.186

🇨🇳 60.166.82.232

🇳🇱 45.148.10.141

🇨🇳 42.248.129.234

🇨🇳 39.129.119.45

🇪🇸 5.61.202.27

🇺🇸 2a06:98c0:3600::103

🇲🇾 195.86.192.66

🇫🇷 194.104.7.57

🇺🇸 167.71.127.144

🇮🇳 122.176.156.82

🇵🇰 103.157.200.42

🇷🇺 78.40.188.36

🇰🇷 59.12.212.38