JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.28.152.150

Activity Trending Down

Abuse Confidence Score

32% Elevated

71 reports

54 reporters · latest 1 week ago

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇺🇸 United States of America
City: East Los Angeles, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

71 from 54 distinct reporters

First reported

September 12th 2023

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇦🇷 Argentina 1 🇨🇿 Czechia 1

Most common categories Web App Attack 3 Brute-Force 3 Port Scan 1 Exploited Host 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-11-06 14:35:05 UTC · (1 week ago)	Detected mail brute force attack from different servers	Brute-Force
🇺🇸 mutebot.net	2026-11-01 02:14:35 UTC · (1 week ago)	SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT=4554 SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT=4554 SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT=4554 SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT=4554 SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT= ... show more SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT=4554 SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT=4554 SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT=4554 SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT=4554 SRC=104.28.152.150, PROTO=TCP, SPT=15026, DPT=4554 show less	Port Scan
Anonymous	2026-10-27 09:36:31 UTC · (2 weeks ago)	apache vulnerability scan	Web App Attack
🇺🇸 TPI-Abuse	2026-10-23 13:39:24 UTC · (3 weeks ago)	(mod_security) mod_security (id:217210) triggered by 104.28.152.150 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:39:21.230433 2026] [security2:error] [pid 12979:tid 12979] [client 104.28.152.150:16438] ... show more (mod_security) mod_security (id:217210) triggered by 104.28.152.150 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:39:21.230433 2026] [security2:error] [pid 12979:tid 12979] [client 104.28.152.150:16438] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|probe.yyy.gv.uy:443\|F\|4"] [data "CONNECT probe.yyy.gv.uy:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "probe.yyy.gv.uy"] [uri "/"] [unique_id "attjiQvv0Z41s3u9k0-ViwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 CBJ	2026-10-23 13:05:41 UTC · (3 weeks ago)	fail2ban: apache-proxy ...	Web App Attack
🇨🇿 unhfree.net	2026-10-10 03:28:05 UTC · (1 month ago)	Oct 10 05:28:05 canopus postfix/smtpd[4096093]: NOQUEUE: reject: RCPT from unknown[104.28.152.150]: 554 5.7.1 Service unavailable; Client host [104.28.152.150] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/104 ... show more Oct 10 05:28:05 canopus postfix/smtpd[4096093]: NOQUEUE: reject: RCPT from unknown[104.28.152.150]: 554 5.7.1 Service unavailable; Client host [104.28.152.150] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/104.28.152.150; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<127.0.0.1> Oct 10 05:28:05 canopus postfix/smtpd[4096093]: NOQUEUE: reject: RCPT from unknown[104.28.152.150]: 554 5.7.1 Service unavailable; Client host [104.28.152.150] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/104.28.152.150; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<127.0.0.1> Oct 10 05:28:05 canopus postfix/smtpd[4096093]: NOQUEUE: reject: RCPT from unknown[104.28.152.150]: 554 5.7.1 Service unavailable; Client host [104.28.152.150] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/104.28.152.150; from=<[email protected]> to=<janosch_jawa@freenet ... show less	Brute-Force Exploited Host
🇦🇺 welife	2026-09-13 02:44:18 UTC · (2 months ago)	Probing for a WordPress login against a web application, blocked at the host firewall. Sample requests, with our own hostnames removed: 104.28.152.150 - 2026-09-13 12:44:18 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chro ... show more Probing for a WordPress login against a web application, blocked at the host firewall. Sample requests, with our own hostnames removed: 104.28.152.150 - 2026-09-13 12:44:18 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 - - - /wp-login.php show less	Web App Attack
🇫🇷 smtp.com.es	2026-07-21 22:44:18 UTC · (3 months ago)	Brute force attempt.	Brute-Force Email Spam
Anonymous	2026-07-20 14:41:10 UTC · (3 months ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
🇩🇪 filstal.org	2026-07-20 12:36:02 UTC · (3 months ago)	CrowdSec: crowdsecurity/postfix-non-smtp-command	Email Spam Hacking
🇩🇪 FeG Deutschland	2026-07-20 00:14:01 UTC · (3 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇫🇷 smtp.com.es	2026-07-19 19:25:38 UTC · (3 months ago)	Brute force attempt.	Brute-Force Email Spam
🇿🇦 maximonline.co.za	2026-07-18 12:04:46 UTC · (3 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇷🇺 DZBOT	2026-07-18 09:01:40 UTC · (3 months ago)	DZBOT. Brute-force users SMTP	Brute-Force
🇩🇪 JF Berne	2026-07-17 23:27:00 UTC · (3 months ago)	SMTP AUTH	Brute-Force

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇬 196.171.80.244

🇺🇸 159.89.236.7

🇺🇸 158.94.187.23

🇩🇪 151.243.11.172

🇮🇳 122.160.142.194

🇹🇼 122.121.161.72

🇯🇵 107.155.15.218

🇳🇱 2a02:26f7:f980:4a40:0:b000:0:e

🇮🇹 217.202.1.235

🇳🇱 195.178.110.242

🇺🇸 192.190.221.7

🇺🇸 189.81.42.206

🇫🇮 170.168.175.57

🇲🇾 121.120.59.43

🇨🇳 120.48.9.221

🇫🇷 84.247.130.20

🇩🇪 69.5.169.64

🇺🇸 66.132.195.17

🇺🇸 57.141.6.65

🇺🇸 57.141.6.29