JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.195.106

104.28.195.106 was found in our database!

This IP was reported 4,679 times. Confidence of Abuse is 87%: ?

87%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.195.106

Whois 104.28.195.106

IP Abuse Reports for 104.28.195.106:

This IP address has been reported a total of 4,679 times from 958 distinct sources. 104.28.195.106 was first reported on January 11th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-14 08:34:59 (1 week ago)	Blocked by UFW (TCP on 6881) Source port: 62725 TTL: 53 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 62725 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 104.28.195.106) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Lee Daniel	2026-06-13 06:54:25 (1 week ago)	104.28.195.106 - - [13/Jun/2026:02:54:23 -0400] "GET /lalettre/plugins/generic/pdfJsViewer/pdf.js/we ... show more 104.28.195.106 - - [13/Jun/2026:02:54:23 -0400] "GET /lalettre/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 30452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.28.195.106 - - [13/Jun/2026:02:54:23 -0400] "GET /nss8/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 30408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.28.195.106 - - [13/Jun/2026:02:54:23 -0400] "GET /pmhb/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 30408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.28.195.106 - - [13/Jun/2026:02:54:24 -0400] "GET /wph/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 30397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.2 ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇳🇱 DrLex0	2026-06-11 14:53:53 (1 week ago)	Probing for PDF JS viewer thing 104.28.195.106 443 - [11/Jun/2026:14:53:52 +0000] "GET /vm36/plugin ... show more Probing for PDF JS viewer thing 104.28.195.106 443 - [11/Jun/2026:14:53:52 +0000] "GET /vm36/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 2655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.28.195.106 443 - [11/Jun/2026:14:53:53 +0000] "GET /nnpub/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 2655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.28.195.106 443 - [11/Jun/2026:14:53:53 +0000] "GET /rjsvd/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 2655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-06-11 14:43:46 (1 week ago)	104.28.195.106 - - [11/Jun/2026:10:43:44 -0400] "GET /journals/plugins/generic/pdfJsViewer/pdf.js/we ... show more 104.28.195.106 - - [11/Jun/2026:10:43:44 -0400] "GET /journals/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 20528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.28.195.106 - - [11/Jun/2026:10:43:44 -0400] "GET /revistas/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 20528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.28.195.106 - - [11/Jun/2026:10:43:45 -0400] "GET /periodicos/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 20552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.28.195.106 - - [11/Jun/2026:10:43:45 -0400] "GET /main/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html HTTP/1.1" 404 20480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/53 ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-06-11 12:19:14 (1 week ago)	Bad Web Bot, Web App Attack, suspicious: 404 flood (16/60s)	Bad Web Bot Web App Attack
🇺🇸 deskpass.com	2026-06-11 10:41:12 (1 week ago)	GET /index.php/journal/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html	Web App Attack
🇺🇸 jcbriar	2026-06-11 05:40:47 (1 week ago)	Searching for vulnerable scripts	Hacking Web App Attack
Anonymous	2026-06-11 05:13:18 (1 week ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 nyt	2026-06-10 02:29:44 (1 week ago)	Bad Web Bot, Web App Attack, suspicious: 404 flood (16/60s)	Bad Web Bot Web App Attack
Anonymous	2026-06-09 20:08:02 (1 week ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2026-06-09 20:02:12 (1 week ago)	Web attack	Bad Web Bot Web App Attack
🇮🇹 abuseiphack	2026-06-08 19:00:42 (2 weeks ago)	Automatic report for brute force attack	Bad Web Bot
🇺🇸 EvilTurkey	2026-06-08 18:46:01 (2 weeks ago)	Web app attack against financial institution website.	Web App Attack Hacking
Anonymous	2026-06-08 10:54:17 (2 weeks ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 etu brutus	2026-06-07 08:56:41 (2 weeks ago)	104.28.195.106 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 4679 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.244.232.111

🇺🇸 193.3.53.6

🇩🇪 148.251.33.198

🇳🇱 72.56.66.71

🇰🇷 49.247.36.49

🇲🇾 49.124.149.208

🇮🇳 14.99.193.114

🇭🇺 193.68.57.43

🇬🇧 185.127.70.202

🇳🇵 157.15.58.174

🇺🇸 152.32.149.35

🇦🇷 138.117.78.134

🇵🇾 138.59.226.67

🇷🇴 92.118.39.232

🇭🇺 79.172.239.74

🇧🇬 79.124.62.126

🇺🇸 52.21.227.35

🇺🇸 47.251.181.34

🇲🇾 47.250.83.81

🇰🇷 14.49.163.100