JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.131.168

104.28.131.168 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.131.168

Whois 104.28.131.168

IP Abuse Reports for 104.28.131.168:

This IP address has been reported a total of 48 times from 21 distinct sources. 104.28.131.168 was first reported on June 24th 2023, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Agrohim	2026-04-03 19:49:45 (3 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇸🇪 DjKlazaplaza	2026-03-07 07:57:00 (4 months ago)		Brute-Force
Anonymous	2024-11-14 02:50:05 (1 year ago)	Unsollicted Connect (8 Times), to port(s): 80	Port Scan Bad Web Bot Web App Attack
🇺🇸 aks4226	2024-11-14 02:11:32 (1 year ago)	Attacking common web applications. (n01)	Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 23:42:27 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 18:42:19.891297 2024] [security2:error] [pid 19320:tid 19320] [client 104.28.131.168:27356] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.5"] [uri "/.env"] [unique_id "ZzU5W7EKwxTFVRtGhWiYggAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 16:04:21 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 11:04:13.357495 2024] [security2:error] [pid 11404:tid 11404] [client 104.28.131.168:33582] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.88"] [uri "/.env"] [unique_id "ZzTN_QyeG4nSmdUWAZskKQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-12 08:03:26 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 03:03:19.672759 2024] [security2:error] [pid 27949:tid 27949] [client 104.28.131.168:65166] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.54"] [uri "/.env"] [unique_id "ZzMLx68h57-2nu9mf-yxKAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-08 06:28:34 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 01:28:30.737546 2024] [security2:error] [pid 15671:tid 15671] [client 104.28.131.168:63539] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.195"] [uri "/.env"] [unique_id "Zy2vjj5rZBKsmkFRFTUKFAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-06 18:33:01 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 13:32:54.389773 2024] [security2:error] [pid 29618:tid 29618] [client 104.28.131.168:54968] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.71"] [uri "/.env"] [unique_id "Zyu2VqwJYlsk17TpQ7Ki5QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-06 05:56:33 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 00:56:26.121022 2024] [security2:error] [pid 9787:tid 9787] [client 104.28.131.168:37697] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.13"] [uri "/.env"] [unique_id "ZysFCn0DojpsmPaFLLiDkQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-06 01:40:00 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 20:39:56.473725 2024] [security2:error] [pid 25752:tid 25752] [client 104.28.131.168:51320] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.119"] [uri "/.env"] [unique_id "ZyrI7DaNP3Rqn4r431KirwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-04 02:00:42 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 03 21:00:36.118481 2024] [security2:error] [pid 7013:tid 7013] [client 104.28.131.168:13595] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.23"] [uri "/.env"] [unique_id "ZygqxMWNo5XCpcXROzJ85QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-04 00:22:44 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 03 19:22:37.738719 2024] [security2:error] [pid 16231:tid 16231] [client 104.28.131.168:29878] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.236"] [uri "/.env"] [unique_id "ZygTzQxsvXJE2DVZYype6gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-03 18:11:04 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 03 13:10:56.979421 2024] [security2:error] [pid 28075:tid 28075] [client 104.28.131.168:49684] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.56"] [uri "/.env"] [unique_id "Zye8sI7Hp8LHNhDOGZpVjQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-02 07:54:26 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.131.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 03:54:21.938617 2024] [security2:error] [pid 10011:tid 10059] [client 104.28.131.168:54803] [client 104.28.131.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vivierae.com"] [uri "/.env"] [unique_id "ZyXarenbivpgG89LLSoFIQAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.51.202.242

🇧🇪 198.235.24.167

🇧🇷 45.169.200.254

🇺🇸 205.169.39.0

🇨🇴 201.184.50.251

🇧🇪 198.235.24.176

🇺🇸 162.216.149.42

🇭🇰 152.32.172.177

🇺🇸 147.185.132.54

🇮🇳 103.182.132.154

🇺🇸 74.7.241.10

🇷🇸 66.185.126.244

🇺🇸 64.62.197.77

🇹🇭 203.154.158.195

🇧🇷 177.50.203.146

🇺🇸 172.253.1.23

🇲🇲 103.25.76.133

🇹🇷 94.154.43.50

🇺🇸 64.62.197.223

🇮🇪 52.213.122.222