104.28.196.225

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
43% Elevated
113 reports
56 reporters · latest 14 hours ago
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇷🇺 Russian Federation
City
Irkutsk, Irkutsk Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
113 from 56 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇦 Canada 3 🇩🇪 Germany 3 🇫🇷 France 3
Most common categories Web App Attack 9 Brute-Force 6 Hacking 4 DDoS Attack 3 Port Scan 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇳 鹏鹏
monitor: on VM-0-7-ubuntu | port: 30135 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇷🇺 Agrohim
Gate Inet blocked for categories:
DDoS Attack Ping of Death Port Scan Hacking Brute-Force
Anonymous
Reported by internal abuse tracking
DDoS Attack Web App Attack
🇺🇸 bigwavedave
Wordpress Attack
Web App Attack
🇺🇸 IndigoRidge
Web App Attack
🇫🇷 masterguru
(xmlrpc) Apache: Failed xmlrpc access from 104.28.196.225 (CA/Canada/-): 10 in the last 3600 secs (0-201)
Hacking
Anonymous
Hacking Web App Attack
🇧🇪 madeit
Web App Attack
Anonymous
Reported by internal abuse tracking
DDoS Attack Web App Attack
🇩🇪 konseptit
(wordpress) Failed wordpress login from 104.28.196.225 (RU/Russia/-)
Brute-Force
🇷🇴 DamonOne
Blocked by OPNsense; 3 hits, proto=udp, ports=23480
Port Scan Hacking
🇨🇭 backslash
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇫🇷 tecnicorioja
POST /xmlrpc.php [25/Sep/2026:18:02:26
Web App Attack Brute-Force
🇬🇧 Comberton
Ban via by F2B apache-wordfence jail
Brute-Force
🇫🇷 dynamix
WordPress XMLRPC Brute Force Attack
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.16.121.118
🇬🇧 195.206.182.197
🇳🇱 185.223.235.51
🇭🇰 154.92.17.128
🇬🇧 81.19.219.201
🇺🇸 64.62.197.182
🇺🇸 48.217.50.172
🇧🇪 34.140.6.18
🇬🇧 31.14.254.68
🇨🇭 20.203.184.59
🇺🇸 157.230.81.246
🇩🇪 141.11.36.202
🇩🇪 141.11.36.153
🇮🇳 103.250.161.199
🇷🇺 94.180.139.162
🇷🇴 81.181.129.218
🇱🇹 62.60.134.212
🇺🇸 52.186.179.199
🇨🇳 43.138.68.113
🇬🇧 35.203.211.197
feedback