104.28.215.132
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇮🇩 Indonesia
- City
- Surabaya, East Java
Abuse Reports
Total reports
368 from
149 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 Comberton |
Ban via F2B web files probes
|
Brute-Force Web App Attack | |
| 🇩🇪 todix |
"POST /?rest_route=/batch/v1 HTTP/1.1" 207 6407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
|
Web App Attack | |
| 🇫🇷 uthul |
T-Pot honeypot: 56 hits on ports [443] (automated)
|
Port Scan Web App Attack | |
| 🇫🇷 uthul |
T-Pot honeypot: 74 hits on ports [443] (automated)
|
Port Scan Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
|
Exploited Host Web App Attack | |
| 🇳🇦 jacqueskruger |
|
Web App Attack | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-01T18:24:29.000Z.
|
Web App Attack | |
| 🇿🇦 vanderhost |
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-admin/ via rule: /wp-admin
|
Web App Attack Bad Web Bot | |
| 🇺🇸 kosada.com |
|
Web App Attack | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Forum Spammer via CitrixHoneypot IOC Country: Indonesia 2x -> Target Country: Germany HTTPS
|
Hacking Web App Attack | |
| 🇲🇾 Rizzy |
Multiple WAF Violations
|
Brute-Force Web App Attack | |
| 🇫🇷 Omar Martínez |
104.28.215.132 - - [01/Nov/2026:02:46:38 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 7431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
|
Phishing Email Spam Blog Spam | |
| 🇦🇺 MAGIC |
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack Bad Web Bot | |
| 🇬🇧 andypiper |
CrowdSec ban for crowdsecurity/netgear-router-bruteforce
|
Brute-Force Web App Attack | |
| 🇨🇦 zXero |
Fail2Ban automatic report - jail: no-wordpress
|
Brute-Force SSH DDoS Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown