JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.165.121

104.28.165.121 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 79%: ?

79%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇫🇮 Finland
City	Vantaa, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.165.121

Whois 104.28.165.121

IP Abuse Reports for 104.28.165.121:

This IP address has been reported a total of 111 times from 54 distinct sources. 104.28.165.121 was first reported on October 6th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 matthieul.dev	2026-07-25 15:45:18 (3 hours ago)	Blocked by os-abuseipdb; 12 hits, proto=tcp,udp, ports=29547	Port Scan Brute-Force
🇺🇸 xmission.com	2026-07-25 13:25:30 (5 hours ago)	Blocked by UFW (TCP on 123) Source port: 16181 TTL: 44 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 123) Source port: 16181 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 104.28.165.121) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 4server	2026-07-25 02:44:53 (16 hours ago)	[SatJul2504:44:48.9766662026][security2:error][pid3971366:tid3971510][client104.28.165.121:0]ModSecu ... show more [SatJul2504:44:48.9766662026][security2:error][pid3971366:tid3971510][client104.28.165.121:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.federicorella.ch.136-243-54-122.cpanel.site\"][uri\"/.env.sample\"][unique_id\"amQjICaP4UHyQKEFeZPJjQAAAQk\"]\,referer:https://www.google.com/search\?q=www.federicorella.ch.136-243-54-122.cpanel.site show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-07-24 22:18:00 (20 hours ago)	[SatJul2500:17:56.8115912026][security2:error][pid1031703:tid1031800][client104.28.165.121:0]ModSecu ... show more [SatJul2500:17:56.8115912026][security2:error][pid1031703:tid1031800][client104.28.165.121:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.giardinonoleggioticino.ch.81-17-25-250.cpanel.site\"][uri\"/wp-config.php\"][unique_id\"amPklCQpO0MWYuzuecCd5AAAAUg\"]\,referer:https://www.google.com/search\?q=www.giardinonoleggioticino.ch.81-17-25-250.cpanel.site show less	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-07-24 11:38:58 (1 day ago)	cloudlinux2 fail2ban: 2026-07-24 13:33:43,516 fail2ban.filter [1816]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-24 13:33:43,516 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 104.28.165.121 - 2026-07-24 13:33:43cloudlinux2 fail2ban: 2026-07-24 13:34:58,649 fail2ban.filter [1816]: INFO [plesk-wordpress] Found 185.251.19.99 - 2026-07-24 13:34:58cloudlinux2 fail2ban: 2026-07-24 13:34:57,240 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 104.28.165.121 - 2026-07-24 13:34:57cloudlinux2 fail2ban: 2026-07-24 13:35:41,478 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 112.207.177.177 - 2026-07-24 13:35:41cloudlinux2 fail2ban: 2026-07-24 13:35:35,242 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 78.101.28.152 - 2026-07-24 13:35:35cloudlinux2 fail2ban: 2026-07-24 13:36:00,461 fail2ban.actions [1816]: NOTICE [plesk-modsecurity] Ban 104.28.165.121cloudlinux2 fail2ban: 2026-07-24 13:36:00,444 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 104.28.165.121 - 2026-07-24 13:36:00cloudlinux2 fai show less	Web App Attack
🇺🇸 kosada.com	2026-07-23 11:52:28 (2 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇹 CoreTech srl	2026-07-22 18:28:57 (3 days ago)	cloudlinux2 fail2ban: 2026-07-22 20:23:46,338 fail2ban.filter [1589]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-22 20:23:46,338 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 104.28.165.121 - 2026-07-22 20:23:46cloudlinux2 fail2ban: 2026-07-22 20:24:49,926 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 104.28.165.121 - 2026-07-22 20:24:49cloudlinux2 fail2ban: 2026-07-22 20:25:23,430 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Unban 31.193.35.210cloudlinux2 fail2ban: 2026-07-22 20:25:53,684 fail2ban.filter [1589]: INFO [recidive] Found 104.28.165.121 - 2026-07-22 20:25:53cloudlinux2 fail2ban: 2026-07-22 20:25:53,533 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 104.28.165.121 - 2026-07-22 20:25:53cloudlinux2 fail2ban: 2026-07-22 20:25:53,677 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Ban 104.28.165.121cloudlinux2 fail2ban: 2026-07-22 20:26:36,783 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.194.118 - 2026-07-22 20:26:36cloudlinux2 fail2ban: 2026-07-22 20:26:41,090 show less	Web App Attack
Anonymous	2026-07-22 13:48:21 (3 days ago)	[redacted] 104.28.165.121 - - [22/Jul/2026:15:47:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" " ... show more [redacted] 104.28.165.121 - - [22/Jul/2026:15:47:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 104.28.165.121 - - [22/Jul/2026:15:47:49 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 104.28.165.121 - - [22/Jul/2026:15:48:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack/12.5; WordPress/6.4; http://site72226810.com" [redacted] 104.28.165.121 - - [22/Jul/2026:15:48:10 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack/12.0; WordPress/6.1; http://site15400113.com" [redacted] 104.28.165.121 - - [22/Jul/2026:15:48:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-22 11:15:07 (3 days ago)	[redacted] 104.28.165.121 - - [22/Jul/2026:13:14:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 104.28.165.121 - - [22/Jul/2026:13:14:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 104.28.165.121 - - [22/Jul/2026:13:14:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site57680926.com" [redacted] 104.28.165.121 - - [22/Jul/2026:13:14:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site15004279.com" [redacted] 104.28.165.121 - - [22/Jul/2026:13:14:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site58416243.com" [redacted] 104.28.165.121 - - [22/Jul/2026:13:15:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" ... show less	Hacking Web App Attack
Anonymous	2026-07-21 21:48:30 (3 days ago)	[redacted] 104.28.165.121 - - [21/Jul/2026:23:47:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 104.28.165.121 - - [21/Jul/2026:23:47:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site67680600.com" [redacted] 104.28.165.121 - - [21/Jul/2026:23:47:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site87205623.com" [redacted] 104.28.165.121 - - [21/Jul/2026:23:48:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 104.28.165.121 - - [21/Jul/2026:23:48:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 104.28.165.121 - - [21/Jul/2026:23:48:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" ... show less	Hacking Web App Attack
🇩🇪 anycast_ac	2026-07-19 22:43:17 (5 days ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 75 requests on port 443	DDoS Attack Web App Attack
🇺🇸 xmission.com	2026-07-19 16:43:10 (6 days ago)	Blocked by UFW (TCP on 123) Source port: 61036 TTL: 44 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 123) Source port: 61036 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 104.28.165.121) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-17 22:40:18 (1 week ago)	Blocked by UFW (TCP on 9101) Source port: 53386 TTL: 44 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 53386 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 104.28.165.121) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-16 16:27:37 (1 week ago)	Blocked by UFW (TCP on 1) Source port: 51290 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 51290 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 104.28.165.121) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kosada.com	2026-07-13 15:38:16 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.113

🇵🇱 176.53.159.197

🇲🇲 103.154.241.40

🇺🇦 88.135.218.115

🇬🇧 35.203.211.224

🇳🇱 5.61.209.92

🇧🇷 205.210.31.228

🇮🇳 202.141.101.104

🇦🇷 186.190.185.139

🇫🇮 147.185.133.29

🇵🇱 109.205.211.233

🇵🇱 74.248.96.101

🇩🇪 69.5.169.113

🇮🇳 20.204.81.42

🇺🇸 18.116.101.220

🇧🇷 186.194.252.112

🇪🇸 158.158.16.147

🇺🇸 152.32.205.193

🇨🇳 106.12.178.226

🇺🇸 74.7.242.44