JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.234.32.28

Recent Activity

Abuse confidence score ?

4% Caution

66 reports

32 reporters · latest 12 hours ago

ISP	AS206092 Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	ipxo.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.234.32.28

Export CSV

This IP address has been reported a total of 66 times from 32 distinct sources. 104.234.32.28 was first reported on September 11th 2024, and the most recent report was 12 hours ago. In the last 60 days, the only reporter location was: Spain with 1 report. The only category in these recent reports was: Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-10-03 06:22:10 (12 hours ago)	Brute force	Brute-Force
🇫🇷 masterguru	2026-07-02 10:21:46 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-135) show less	Bad Web Bot
Anonymous	2026-05-26 19:01:19 (4 months ago)	wp admin page access attempt ...	Hacking Web App Attack
🇺🇸 dtorrer	2026-04-27 05:28:33 (5 months ago)	Brute-force general attack.	Brute-Force
🇩🇪 todix	2026-04-07 02:19:46 (5 months ago)	Wordpress brute force or spam attempt from 104.234.32.28	Brute-Force
🇦🇺 screwlooseit.com.au	2026-04-07 02:10:02 (5 months ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN CA/Canada/-	Web App Attack
🇳🇱 Pornomens	2026-02-09 18:00:17 (7 months ago)	104.234.32.28 - - [09/Feb/2026:18:59:25 +0100] "GET /frontend/web/debug/default/view HTTP/1.1" 403 4 ... show more 104.234.32.28 - - [09/Feb/2026:18:59:25 +0100] "GET /frontend/web/debug/default/view HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 104.234.32.28 - - [09/Feb/2026:18:59:51 +0100] "GET /env.development.js HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 104.234.32.28 - - [09/Feb/2026:19:00:17 +0100] "GET /src/api/config.js HTTP/1.1" 403 4001 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-03 18:45:59 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 13:45:54.093485 2026] [security2:error] [pid 29441:tid 29459] [client 104.234.32.28:23981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.14"] [uri "/.env"] [unique_id "aYJCYsugZMpP2ozxTvve1gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-03 18:11:55 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 13:11:46.311894 2026] [security2:error] [pid 2908:tid 2908] [client 104.234.32.28:55279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.89"] [uri "/vendor/.env"] [unique_id "aYI6YvkaN2LfcRRc8A-qCQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-03 12:14:49 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 07:14:44.830486 2026] [security2:error] [pid 21186:tid 21186] [client 104.234.32.28:33461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.156"] [uri "/conf/.env"] [unique_id "aYHmtEVFKzDfZy-O4U0H2gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-03 11:20:34 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 06:20:13.847058 2026] [security2:error] [pid 28189:tid 28189] [client 104.234.32.28:41889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.215"] [uri "/crm/.env"] [unique_id "aYHZ7V1d51YMmzh2pmfUUwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-02 19:50:32 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 14:50:27.875973 2026] [security2:error] [pid 13386:tid 13386] [client 104.234.32.28:29547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.30"] [uri "/conf/.env"] [unique_id "aYEAA-Vp-q7yQlw5gXA5uwAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-02 17:27:57 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 12:27:49.556756 2026] [security2:error] [pid 14978:tid 14978] [client 104.234.32.28:20595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.52"] [uri "/conf/.env"] [unique_id "aYDelYd6E0nPq6xC9zjrDgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-02 12:32:19 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 07:32:09.710190 2026] [security2:error] [pid 4960:tid 4960] [client 104.234.32.28:29993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.234"] [uri "/wp-admin/.env"] [unique_id "aYCZSWYa3v01QxAFuzJb6AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-02 05:56:49 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.32.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 00:56:45.235765 2026] [security2:error] [pid 1182904:tid 1182904] [client 104.234.32.28:27137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.169"] [uri "/conf/.env"] [unique_id "aYA8nYQvFXwIUJsQf70bQwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 185.195.19.201

🇧🇷 181.191.230.21

🇺🇸 162.216.149.210

🇨🇦 108.168.45.166

🇨🇬 102.141.46.100

🇫🇷 82.102.18.222

🇲🇽 74.244.101.105

🇸🇬 64.118.142.142

🇬🇧 13.43.89.190

🇰🇷 211.106.133.202

🇸🇷 200.7.148.60

🇭🇰 199.45.154.116

🇨🇳 183.94.33.245

🇨🇳 182.105.123.10

🇧🇷 177.235.253.8

🇳🇱 158.94.210.4

🇺🇸 129.121.126.188

🇨🇳 119.190.240.219

🇰🇷 118.43.197.135

🇧🇩 103.159.2.113