JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.251.245

104.28.251.245 was found in our database!

This IP was reported 149 times. Confidence of Abuse is 9%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇮🇩 Indonesia
City	Semarang, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.251.245

Whois 104.28.251.245

IP Abuse Reports for 104.28.251.245:

This IP address has been reported a total of 149 times from 51 distinct sources. 104.28.251.245 was first reported on December 28th 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Lee Daniel	2026-05-18 07:27:56 (3 weeks ago)	104.28.251.245 - - [18/May/2026:03:27:52 -0400] "GET /user/21 HTTP/1.1" 404 47034 "-" "Mozilla/5.0 ( ... show more 104.28.251.245 - - [18/May/2026:03:27:52 -0400] "GET /user/21 HTTP/1.1" 404 47034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.28.251.245 - - [18/May/2026:03:27:53 -0400] "GET /node/22 HTTP/1.1" 404 47034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.28.251.245 - - [18/May/2026:03:27:53 -0400] "GET /user/22 HTTP/1.1" 404 47034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.28.251.245 - - [18/May/2026:03:27:55 -0400] "GET /node/23 HTTP/1.1" 404 47034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.28.251.245 - - [18/May/2026:03:27:55 -0400] "GET /user/23 HTTP/1.1" 404 47034 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Ch ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-05-17 03:15:09 (3 weeks ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇮🇹 A000Z	2026-04-11 07:58:46 (2 months ago)	Fail2Ban: 104.28.251.245 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 104.28.251.245 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-02-19 17:50:27 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 xmission.com	2026-02-16 11:29:08 (3 months ago)	Blocked by UFW (TCP on 1) Source port: 42585 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 42585 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 104.28.251.245) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-02-15 11:30:08 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-12 11:25:06 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-09 11:20:21 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-05 17:40:09 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇫🇷 lauraorchid	2026-02-03 01:06:13 (4 months ago)	2026-02-03T01:06:08.965243+00:00 cyrene nginx[1833]: 2026/02/03 01:06:08 [error] 1833#1833: 4541 op ... show more 2026-02-03T01:06:08.965243+00:00 cyrene nginx[1833]: 2026/02/03 01:06:08 [error] 1833#1833: 4541 open() "/srv/http/html/iejfif" failed (2: No such file or directory), client: 104.28.251.245, server: 2a12-5e40-1-6dff-c13f-fe36-19c3-e562.cprapid.com, request: "GET /iejfif HTTP/1.1", host: "91-239-208-63.cprapid.com" 2026-02-03T01:06:09.480017+00:00 cyrene nginx[1833]: 2026/02/03 01:06:09 [error] 1833#1833: 4541 open() "/srv/http/html/favicon.ico" failed (2: No such file or directory), client: 104.28.251.245, server: 2a12-5e40-1-6dff-c13f-fe36-19c3-e562.cprapid.com, request: "GET /favicon.ico HTTP/1.1", host: "91-239-208-63.cprapid.com", referrer: "https://91-239-208-63.cprapid.com/iejfif" 2026-02-03T01:06:10.613912+00:00 cyrene nginx[1833]: 2026/02/03 01:06:10 [error] 1833#1833: 4541 open() "/srv/http/html/iejfif" failed (2: No such file or directory), client: 104.28.251.245, server: 2a12-5e40-1-6dff-c13f-fe36-19c3-e562.cprapid.com, request: "GET /iejfif HTTP/1.1", host: "91-239-208-6 ... show less	Brute-Force SSH
Anonymous	2026-02-02 17:35:22 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇿 lp	2026-01-27 17:53:53 (4 months ago)	Email account brute force: 2 attempts were recorded from 104.28.251.245 2026-01-27T18:42:20+01:00 wa ... show more Email account brute force: 2 attempts were recorded from 104.28.251.245 2026-01-27T18:42:20+01:00 warning: unknown[104.28.251.245]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-01-27T18:42:21+01:00 warning: unknown[104.28.251.245]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇧🇪 cmbplf	2026-01-10 19:29:46 (5 months ago)	1.419 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇮🇩 Burayot	2026-01-08 23:35:12 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.28.251.245 (ID/Indonesia/-): 2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.28.251.245 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 sockominfo	2026-01-08 23:00:09 (5 months ago)	ModSecurity rejected a query. Threat Score: 5.3/10 (MEDIUM). CVSS: 5/10 (Medium). Bayesian: 68%. MIT ... show more ModSecurity rejected a query. Threat Score: 5.3/10 (MEDIUM). CVSS: 5/10 (Medium). Bayesian: 68%. MITRE: T1057. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack

Showing 1 to 15 of 149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 220.246.47.146

🇺🇸 207.90.244.25

🇺🇸 205.210.31.50

🇧🇷 187.17.224.139

🇺🇸 172.235.40.131

🇺🇸 172.191.94.172

🇩🇪 167.94.145.16

🇺🇸 155.254.245.43

🇩🇪 135.125.136.59

🇨🇳 120.48.102.177

🇷🇺 91.238.28.108

🇺🇸 64.62.156.66

🇳🇱 45.148.10.240

🇸🇬 8.219.79.215

🇬🇧 193.163.125.136

🇫🇮 147.185.133.128

🇫🇮 147.185.133.34

🇩🇪 146.70.117.46

🇨🇳 121.12.155.218

🇨🇳 115.191.29.211