104.28.165.104
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇵🇱 Poland
- City
- Pruszkow, Mazovia
Abuse Reports
Total reports
56 from
41 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| Anonymous |
104.28.165.104 - - [12/Nov/2026:20:13:53 +0100] "GET /.env.production HTTP/1.1" 404 152885 "https://www.google.com/search?q=info.curio.codes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
...
|
Brute-Force Web App Attack | |
| 🇩🇪 IVski.com |
IVski WAF | Sensitive file probe - looking for exposed .aws/credentials
|
Hacking Brute-Force Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
|
Exploited Host Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-09.
|
Web App Attack SSH Hacking | |
| 🇳🇱 debestelapp |
|
Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇨🇿 Honzas |
Fail2ban: AUTH Attack on port 465
|
Brute-Force | |
| Anonymous |
104.28.165.104 - - [07/Nov/2026:21:22:17 +0100] "GET /product-category/marke/body-attack/ HTTP/1.1" 200 70283 "https:///." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
|
Web App Attack | |
| 🇺🇦 URAN Publishing Service |
[17/Oct/2026:13:38:36 +0300] -- 104.28.165.104 Ban reason: User-Agent Python-urllib
|
Bad Web Bot Web App Attack | |
| Anonymous |
denied traffic to a honeypot network. destination port 23.
|
Port Scan Hacking | |
| 🇩🇪 xavier-momain.eu |
CrowdSec ban — scenario: ssh:bruteforce
|
Brute-Force SSH | |
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown