JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.28.161.132

Neutral Activity

Abuse confidence score ?

0% Low Risk

39 reports

29 reporters · latest 1 month ago

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	South Fulton, Georgia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.28.161.132

Export CSV

This IP address has been reported a total of 39 times from 29 distinct sources. 104.28.161.132 was first reported on March 28th 2026, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: Germany with 1 report. The most common categories in these recent reports were: Exploited Host 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-09-02 08:34:53 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇦🇹 Pingger Shikkoken	2026-08-21 13:42:33 (2 months ago)	2026-08-21T13:42:33+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-08-21T13:42:33+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.161.132 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=31112 DF PROTO=TCP SPT=26096 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-21T13:42:34+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.161.132 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=31113 DF PROTO=TCP SPT=26096 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-21T13:42:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=104.28.161.132 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=31114 DF PROTO=TCP SPT=26096 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇬🇧 consul.to	2026-08-20 17:29:40 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 dom4k	2026-08-15 03:27:01 (2 months ago)	104.28.161.132 - - [15/Aug/2026:03:26:58 +0000] "HEAD /.env.old HTTP/1.1" 444 0 "-" "Mozilla/5.0 (co ... show more 104.28.161.132 - - [15/Aug/2026:03:26:58 +0000] "HEAD /.env.old HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Web Spam Bad Web Bot Web App Attack
🇩🇪 pltcldvlpr	2026-08-12 22:04:16 (2 months ago)	CMS/framework probe: 104.28.161.132 - - [13/Aug/2026:00:04:15 +0200] "HEAD /wp-config.php HTTP/1.1" ... show more CMS/framework probe: 104.28.161.132 - - [13/Aug/2026:00:04:15 +0200] "HEAD /wp-config.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" asn=13335 org="Cloudflare, Inc." country=GB ... show less	Web App Attack
Anonymous	2026-08-11 21:09:05 (2 months ago)	104.28.161.132 - - [11/Aug/2026:23:09:04 +0200] "GET /.env.local HTTP/1.1" 404 11809 "https://www.go ... show more 104.28.161.132 - - [11/Aug/2026:23:09:04 +0200] "GET /.env.local HTTP/1.1" 404 11809 "https://www.google.com/search?q=github.curio.codes" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" ... show less	Brute-Force Web App Attack
🇺🇸 jfz-abuse	2026-08-11 12:27:47 (2 months ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇩🇪 FeG Deutschland	2026-08-10 16:51:24 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇩🇪 lolyay	2026-08-09 11:35:41 (2 months ago)	104.28.161.132 - - [09/Aug/2026:11:35:38 +0000] "HEAD /.env.dist HTTP/1.1" 200 0 "-" "Mozilla/5.0 (M ... show more 104.28.161.132 - - [09/Aug/2026:11:35:38 +0000] "HEAD /.env.dist HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.28.161.132 - - [09/Aug/2026:11:35:40 +0000] "HEAD /.env.bak HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" ... show less	Web App Attack Bad Web Bot
🇩🇪 Holger	2026-08-08 19:50:21 (2 months ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇺🇸 LotPhantom	2026-08-08 04:09:19 (2 months ago)	2026/08/08 04:09:19 [error] 3787300#3787300: 89933 access forbidden by rule, client: 104.28.161.132 ... show more 2026/08/08 04:09:19 [error] 3787300#3787300: 89933 access forbidden by rule, client: 104.28.161.132, server: wynnesmiles.com, request: "HEAD /.env.production HTTP/1.1", host: "wynnesmiles.com" ... show less	Web App Attack
🇩🇪 Holger	2026-08-07 03:55:05 (2 months ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇫🇷 pm33	2026-08-06 11:14:55 (2 months ago)	Wordpress login attempts	Brute-Force
Anonymous	2026-08-04 14:46:13 (2 months ago)	104.28.161.132 cloud.patrz.eu - [04/Aug/2026:16:46:01 +0200] "HEAD /wp-config.php.bak HTTP/1.1" 404 ... show more 104.28.161.132 cloud.patrz.eu - [04/Aug/2026:16:46:01 +0200] "HEAD /wp-config.php.bak HTTP/1.1" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" ... show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-08-03 16:04:13 (2 months ago)	[03/Aug/2026:19:04:12 +0300] -- 104.28.161.132 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [03/Aug/2026:19:04:12 +0300] -- 104.28.161.132 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /secrets.json HTTP/1.1 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.202.48.88

🇩🇪 109.160.32.121

🇺🇸 65.49.1.220

🇺🇸 2602:80d:1007::73

🇺🇸 216.73.161.99

🇺🇸 206.189.177.188

🇧🇪 198.235.24.198

🇫🇮 185.148.3.163

🇺🇸 185.44.66.153

🇺🇸 172.210.9.220

🇺🇸 167.71.173.4

🇩🇪 151.243.11.49

🇯🇵 150.230.214.236

🇱🇰 112.135.112.242

🇻🇳 103.195.236.35

🇨🇳 101.34.91.69

🇸🇬 94.231.206.5

🇴🇲 37.40.90.245

🇨🇳 14.116.172.42

🇺🇿 213.230.111.14