JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.28.153.88

Recent Activity

Abuse confidence score ?

17% Caution

346 reports

214 reporters · latest 3 days ago

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	South Fulton, Georgia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.28.153.88

Export CSV

This IP address has been reported a total of 346 times from 214 distinct sources. 104.28.153.88 was first reported on January 26th 2023, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: Germany with 2 reports; United Kingdom of Great Britain and Northern Ireland with 1 report; Netherlands with 1 report. The most common categories in these recent reports were: Web App Attack 4 times; Bad Web Bot 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-24 22:03:08 (3 days ago)	104.28.153.88 - - [25/Oct/2026:00:03:07 +0200] "GET /product-category/marke/big-zone/ HTTP/1.1" 200 ... show more 104.28.153.88 - - [25/Oct/2026:00:03:07 +0200] "GET /product-category/marke/big-zone/ HTTP/1.1" 200 69420 "https:///.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" show less	Web App Attack
🇩🇪 FD-IX	2026-08-31 05:43:16 (1 month ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-30 19:46:11 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 e.fierstra	2026-08-30 06:00:23 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-08-27 13:59:10 (2 months ago)	High-confidence malicious configuration/VCS probe	Web App Attack
Anonymous	2026-08-25 03:17:15 (2 months ago)	104.28.153.88 - - [25/Aug/2026:03:17:14 +0000] "GET /.aws/credentials HTTP/1.1" 404 3313 "-" "-" ...	Brute-Force Web App Attack
🇫🇮 6kilowatti	2026-08-21 12:55:10 (2 months ago)	104.28.153.88 - - [21/Aug/2026:15:55:08 +0300] "GET /config.yml HTTP/1.1" 500 2517 "-" "-" ...	Web App Attack
🇺🇸 wteiken	2026-08-17 16:41:52 (2 months ago)	2026-08-17T12:41:48.429028-04:00 nostromo.teiken.net kernel: [604232.339626] syn_limit:IN=en-wan OUT ... show more 2026-08-17T12:41:48.429028-04:00 nostromo.teiken.net kernel: [604232.339626] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.153.88 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=33020 DF PROTO=TCP SPT=44341 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-17T12:41:48.432376-04:00 nostromo.teiken.net kernel: [604232.341495] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.153.88 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=52838 DF PROTO=TCP SPT=44352 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-17T12:41:49.452346-04:00 nostromo.teiken.net kernel: [604233.362934] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=104.28.153.88 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=33021 DF PROTO=TCP SPT=44341 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-17T12:41:49.462390-04:00 nostromo.teiken.net kernel: [604233.364220] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00: ... show less	Port Scan
🇬🇧 consul.to	2026-08-13 15:18:50 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 pltcldvlpr	2026-08-12 13:30:04 (2 months ago)	CMS/framework probe: 104.28.153.88 - - [12/Aug/2026:15:30:04 +0200] "GET /.env.local HTTP/1.1" 301 1 ... show more CMS/framework probe: 104.28.153.88 - - [12/Aug/2026:15:30:04 +0200] "GET /.env.local HTTP/1.1" 301 178 "https://www.google.com/search?q=studentenchronik.de" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" asn=13335 org="Cloudflare, Inc." country=US ... show less	Web App Attack
🇬🇧 sc user	2026-08-12 09:02:44 (2 months ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇬🇧 sc user	2026-08-11 05:10:11 (2 months ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇩🇪 FeG Deutschland	2026-08-10 16:51:47 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇫🇷 pm33	2026-08-10 02:24:34 (2 months ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇬🇧 sc user	2026-08-09 23:46:48 (2 months ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan

Showing 1 to 15 of 346 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.202.48.88

🇩🇪 109.160.32.121

🇺🇸 65.49.1.220

🇺🇸 2602:80d:1007::73

🇺🇸 216.73.161.99

🇺🇸 206.189.177.188

🇧🇪 198.235.24.198

🇫🇮 185.148.3.163

🇺🇸 185.44.66.153

🇺🇸 172.210.9.220

🇺🇸 167.71.173.4

🇩🇪 151.243.11.49

🇯🇵 150.230.214.236

🇱🇰 112.135.112.242

🇻🇳 103.195.236.35

🇨🇳 101.34.91.69

🇸🇬 94.231.206.5

🇴🇲 37.40.90.245

🇨🇳 14.116.172.42

🇺🇿 213.230.111.14