This IP address has been reported a total of
150
times from
79 distinct
sources.
104.28.243.27 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
Poland
with 4
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
Bad Web Bot
6
times;
Brute-Force
5
times;
Web App Attack
4
times;
DDoS Attack
4
times;
Port Scan
3
times;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) URL:/index ...
show moreGENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon
show less
Blocked by UFW on vps3 [2053/tcp]
Source port: 22966
TTL: 55
Packet length: 60
TOS: 0x00
This repor ...
show moreBlocked by UFW on vps3 [2053/tcp]
Source port: 22966
TTL: 55
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Not following 301 redirects — wasted requests | method: GET | path: /xmlrpc.php | ua: Mozilla/5.0 (W ...
show moreNot following 301 redirects — wasted requests | method: GET | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
MikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-09-24 08:42 UTC. Part of ...
show moreMikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-09-24 08:42 UTC. Part of a distributed credential-stuffing campaign: 21 distinct source IPs attempted the same username against our infrastructure within the same hour. Automated detection. AS13335 Cloudflare, Inc..
show less
Reported by Akarguard DDoS protection: this IP exceeded the per-IP rate limit at our reverse-proxy e ...
show moreReported by Akarguard DDoS protection: this IP exceeded the per-IP rate limit at our reverse-proxy edge (repeated HTTP 444), consistent with an automated Layer 7 flood.
show less
