JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.160.175

104.28.160.175 was found in our database!

This IP was reported 176 times. Confidence of Abuse is 53%: ?

53%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.160.175

Whois 104.28.160.175

IP Abuse Reports for 104.28.160.175:

This IP address has been reported a total of 176 times from 76 distinct sources. 104.28.160.175 was first reported on April 12th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 e.fierstra	2026-09-01 10:35:18 (1 hour ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-31 18:27:34 (18 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 15:34:03 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 11:33:56.273528 2026] [security2:error] [pid 24981:tid 24981] [client 104.28.160.175:60867] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rivercityacct.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rivercityacct.com"] [uri "/"] [unique_id "apL75Fh2b06Z38dpxW7lygAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 14:08:26 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 10:08:20.746912 2026] [security2:error] [pid 28574:tid 28574] [client 104.28.160.175:61033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|intolifeproductions.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "intolifeproductions.com"] [uri "/"] [unique_id "apLn1ImEBnMHediSP2hGGAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 neron	2026-08-25 21:21:50 (6 days ago)	CrowdSec blocked: tcp:scan detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 21:35:00 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 17:34:56.555598 2026] [security2:error] [pid 30860:tid 30860] [client 104.28.160.175:33071] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|countylockup.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "countylockup.org"] [uri "/"] [unique_id "aotngInY51yY7yZkNi06rAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 19:48:41 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 15:48:35.382129 2026] [security2:error] [pid 8789:tid 8789] [client 104.28.160.175:34489] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|centralbaptistalcoa.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "centralbaptistalcoa.org"] [uri "/"] [unique_id "aotOk3B7yRjsmXUbryBazQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 neron	2026-08-21 18:25:59 (1 week ago)	CrowdSec blocked: tcp:scan detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 09:42:52 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 05:42:47.113625 2026] [security2:error] [pid 26110:tid 26110] [client 104.28.160.175:47277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|joshuashands.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "joshuashands.org"] [uri "/"] [unique_id "aobMF4OQPTERrr4xRuYDAgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 16:06:54 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 12:06:49.121755 2026] [security2:error] [pid 27534:tid 27534] [client 104.28.160.175:33794] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|alltecmachine.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alltecmachine.com"] [uri "/"] [unique_id "aoXUmVUCv7NHilH9wn3SDQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 15:45:03 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 11:44:56.291268 2026] [security2:error] [pid 20934:tid 20934] [client 104.28.160.175:32820] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|beirutbazar.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "beirutbazar.com"] [uri "/"] [unique_id "aoXPeH_zCEM4Hd6hAnJe_gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 14:39:09 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 104.28.160.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 10:39:01.505662 2026] [security2:error] [pid 5974:tid 5974] [client 104.28.160.175:32929] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|matteozacchino.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "matteozacchino.com"] [uri "/"] [unique_id "aoXABQx7-qjbD0-fQnZHLAAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 neron	2026-08-19 12:26:20 (1 week ago)	CrowdSec blocked: tcp:scan detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-08-18 08:35:15 (2 weeks ago)	Web scanner: GET /.env.sample	Web App Attack Hacking
🇹🇷 neron	2026-08-12 23:06:48 (2 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack

Showing 1 to 15 of 176 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.225.139.200

🇲🇽 189.196.23.106

🇧🇪 172.253.231.213

🇫🇷 169.58.141.176

🇺🇸 167.89.32.193

🇳🇬 102.90.82.141

🇪🇨 45.177.127.183

🇺🇸 172.253.221.151

🇺🇸 144.225.6.182

🇮🇳 103.70.40.36

🇧🇬 78.128.114.166

🇺🇸 35.225.34.116

🇪🇸 34.175.96.107

🇹🇭 27.130.2.132

🇮🇷 217.60.255.130

🇦🇷 181.23.60.220

🇧🇷 179.184.46.161

🇺🇸 147.182.240.222

🇺🇸 97.124.144.194

🇹🇷 91.151.95.66