JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.164.78

104.28.164.78 was found in our database!

This IP was reported 226 times. Confidence of Abuse is 40%: ?

40%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Lansing, Kansas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.164.78

Whois 104.28.164.78

IP Abuse Reports for 104.28.164.78:

This IP address has been reported a total of 226 times from 135 distinct sources. 104.28.164.78 was first reported on August 19th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-11 13:35:57 (2 weeks ago)	Blocked by UFW (TCP on 43866) Source port: 56804 TTL: 55 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 43866) Source port: 56804 TTL: 55 Packet length: 60 TOS: 0x08 This report (for 104.28.164.78) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-11 00:58:57 (2 weeks ago)	Blocked by UFW (TCP on 43866) Source port: 57756 TTL: 55 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 43866) Source port: 57756 TTL: 55 Packet length: 60 TOS: 0x08 This report (for 104.28.164.78) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-10 12:45:38 (2 weeks ago)	Blocked by UFW (TCP on 43866) Source port: 57539 TTL: 55 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 43866) Source port: 57539 TTL: 55 Packet length: 60 TOS: 0x08 This report (for 104.28.164.78) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇦 URAN Publishing Service	2026-07-29 15:57:21 (4 weeks ago)	104.28.164.78 - - [29/Jul/2026:18:57:18 +0300] "GET /.env HTTP/1.1" 404 4700 "-" "Mozilla/5.0 (Macin ... show more 104.28.164.78 - - [29/Jul/2026:18:57:18 +0300] "GET /.env HTTP/1.1" 404 4700 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.28.164.78 - - [29/Jul/2026:18:57:20 +0300] "GET /.env.staging HTTP/1.1" 404 782 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" ... show less	Web App Attack
🇺🇸 Moby	2026-07-29 13:56:01 (4 weeks ago)	104.28.164.78 - - [29/Jul/2026:00:44:08 -0500] "GET /service-account.json HTTP/1.1" 404 984 "-" "Moz ... show more 104.28.164.78 - - [29/Jul/2026:00:44:08 -0500] "GET /service-account.json HTTP/1.1" 404 984 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "75.88.18.218" "techspace.cc" 104.28.164.78 - - [29/Jul/2026:00:44:08 -0500] "GET /credentials.json HTTP/1.1" 404 984 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "75.88.18.218" "techspace.cc" 104.28.164.78 - - [29/Jul/2026:00:44:08 -0500] "GET /serviceAccountKey.json HTTP/1.1" 404 984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "75.88.18.218" "techspace.cc" ... show less	Web App Attack
🇩🇪 Ba-Yu	2026-07-29 12:54:55 (4 weeks ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇳🇱 Peter Touw	2026-07-20 00:26:17 (1 month ago)	exim2 - login authenticator failed for (smtp.ratibus.nl) [104.28.164.78]: 535 Incorrect authenticati ... show more exim2 - login authenticator failed for (smtp.ratibus.nl) [104.28.164.78]: 535 Incorrect authentication data show less	Brute-Force
🇫🇷 masterguru	2026-07-02 14:51:57 (1 month ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196) show less	Hacking
🇩🇪 FeG Deutschland	2026-07-01 21:07:22 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
Anonymous	2026-07-01 15:30:03 (1 month ago)	[server.techsupportltd.gr] legacy-local-block: samples=imported from ipset host_guard4 at 2026-07-01 ... show more [server.techsupportltd.gr] legacy-local-block: samples=imported from ipset host_guard4 at 2026-07-01T15:30:03+00:00 show less	Hacking Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-07-01 11:28:29 (1 month ago)	104.28.164.78 - - [01/Jul/2026:05:28:29 -0600] "GET /.git/config HTTP/2.0" 300 4627 "-" "meta-extern ... show more 104.28.164.78 - - [01/Jul/2026:05:28:29 -0600] "GET /.git/config HTTP/2.0" 300 4627 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" ... show less	Web App Attack
🇫🇷 masterguru	2026-07-01 10:36:46 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.28.164.78 (CA/Canada/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.28.164.78 (CA/Canada/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇮🇩 Burayot	2026-07-01 08:22:52 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.28.164.78 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.28.164.78 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 raph	2026-07-01 04:26:05 (1 month ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇱🇹 NotACaptcha	2026-07-01 04:24:21 (1 month ago)	webserver:443 [01/Jul/2026] "GET /.env~ HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS ... show more webserver:443 [01/Jul/2026] "GET /.env~ HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" webserver:443 [01/Jul/2026] "GET /.git/logs/HEAD HTTP/1.1" 403 366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" webserver:443 [01/Jul/2026] "GET / HTTP/1.1" 200 5565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 226 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 217.211.208.125

🇲🇾 202.165.26.42

🇦🇷 200.81.166.58

🇳🇱 195.178.110.218

🇯🇵 183.76.85.23

🇺🇸 162.216.149.108

🇨🇳 120.209.67.122

🇷🇺 92.255.190.69

🇫🇷 91.196.152.60

🇩🇪 69.5.169.247

🇺🇸 66.132.186.138

🇺🇸 64.62.156.124

🇰🇷 58.76.159.170

🇱🇺 46.151.182.40

🇷🇺 46.146.120.131

🇳🇱 45.148.10.40

🇹🇭 223.207.219.115

🇩🇪 213.209.159.236

🇦🇷 200.69.51.177

🇺🇸 195.184.76.20