JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.131.166

104.28.131.166 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.131.166

Whois 104.28.131.166

IP Abuse Reports for 104.28.131.166:

This IP address has been reported a total of 67 times from 27 distinct sources. 104.28.131.166 was first reported on February 13th 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 DjKlazaplaza	2026-03-07 07:57:00 (4 months ago)		Brute-Force
🇮🇹 Progetto1	2024-12-10 21:47:04 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇧 SilverZippo	2024-11-14 21:15:45 (1 year ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2024-11-14 01:50:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 20:50:42.054961 2024] [security2:error] [pid 5035:tid 5035] [client 104.28.131.166:25697] [client 104.28.131.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.117"] [uri "/.env"] [unique_id "ZzVXcnuePf-4uZ3V1xFSqQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 12:39:03 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 07:38:58.963045 2024] [security2:error] [pid 23122:tid 23122] [client 104.28.131.166:63213] [client 104.28.131.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.51"] [uri "/.env"] [unique_id "ZzSd4uPQkKhiRZkOcPvjTwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-12 07:24:48 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 02:24:41.813570 2024] [security2:error] [pid 28851:tid 28851] [client 104.28.131.166:10218] [client 104.28.131.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.242"] [uri "/.env"] [unique_id "ZzMCueS0l6AwAWP9rD_lvgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 exxos	2024-11-06 23:27:37 (1 year ago)	Attacks with Bad user agents	Hacking
🇷🇴 exxos	2024-11-06 21:44:50 (1 year ago)	web exploit attacks	Web App Attack
🇺🇸 TPI-Abuse	2024-11-06 20:34:44 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 15:34:36.753761 2024] [security2:error] [pid 16423:tid 16423] [client 104.28.131.166:50733] [client 104.28.131.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.90"] [uri "/.env"] [unique_id "ZyvS3N36oNxddc5F275rBwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-03 23:07:25 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 03 18:07:18.629846 2024] [security2:error] [pid 10997:tid 10997] [client 104.28.131.166:64400] [client 104.28.131.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.28"] [uri "/.env"] [unique_id "ZygCJg2a7K4-kwhruNa6zwAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 exxos	2024-11-03 05:20:18 (1 year ago)	traversal attack	Hacking
🇺🇸 TPI-Abuse	2024-11-02 12:16:32 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 08:16:26.234018 2024] [security2:error] [pid 1150456:tid 1150456] [client 104.28.131.166:17569] [client 104.28.131.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnandramonadunn.com"] [uri "/.env"] [unique_id "ZyYYGmJxdLt-76d9jYsLlgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-02 08:44:06 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 04:44:03.384381 2024] [security2:error] [pid 23702:tid 23702] [client 104.28.131.166:53493] [client 104.28.131.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "csems.org"] [uri "/.env"] [unique_id "ZyXmU5DxrAzI1M2HdchMuQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-02 07:53:57 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 03:53:53.820324 2024] [security2:error] [pid 6212:tid 6340] [client 104.28.131.166:54593] [client 104.28.131.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gilesrentalcars.com"] [uri "/.env"] [unique_id "ZyXakRDmqc4l4TBZdibjjQAAAQo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-02 07:38:41 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 03:38:36.658761 2024] [security2:error] [pid 2446518:tid 2446518] [client 104.28.131.166:13373] [client 104.28.131.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cgautomatizacion.com"] [uri "/.env"] [unique_id "ZyXW_F7o9_iCYdGv5uw-hwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a09:bac5:2a93:28d2::411:15

🇩🇪 140.248.75.199

🇨🇳 124.239.169.52

🇦🇿 94.20.62.126

🇺🇸 81.30.98.90

🇩🇪 69.5.169.29

🇺🇸 206.221.176.60

🇩🇪 185.137.164.15

🇵🇱 176.53.159.198

🇺🇸 162.216.150.211

🇺🇸 147.185.132.51

🇺🇸 135.237.125.26

🇸🇬 134.185.93.111

🇨🇳 106.119.165.171

🇺🇸 104.57.179.138

🇻🇳 103.61.122.229

🇩🇪 69.5.169.21

🇺🇸 50.16.216.166

🇨🇳 49.232.100.141

🇦🇷 45.238.107.105