JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.164.242

104.28.164.242 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 71%: ?

71%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇫🇷 France
City	Aulnay-sous-Bois, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.164.242

Whois 104.28.164.242

IP Abuse Reports for 104.28.164.242:

This IP address has been reported a total of 108 times from 75 distinct sources. 104.28.164.242 was first reported on August 17th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ger-stg-sifi1	2026-07-03 06:01:26 (14 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 e.fierstra	2026-07-02 13:17:14 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 sdos.es	2026-07-02 13:13:32 (1 day ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /api/.env"	Web App Attack
🇮🇹 mediarama.com	2026-07-02 12:24:31 (1 day ago)	Banned by Fail2Ban	Web App Attack
Anonymous	2026-07-02 11:58:38 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 paissangroup	2026-07-02 08:01:11 (1 day ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-02 07:34:06 (1 day ago)	104.28.164.242 - sliver85.eu - [02/Jul/2026:09:34:05 +0200] "GET /.git/config HTTP/2.0" 404 "Mozilla ... show more 104.28.164.242 - sliver85.eu - [02/Jul/2026:09:34:05 +0200] "GET /.git/config HTTP/2.0" 404 "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 104.28.164.242 - sliver85.eu - [02/Jul/2026:09:34:05 +0200] "GET /application.properties HTTP/2.0" 404 "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 104.28.164.242 - sliver85.eu - [02/Jul/2026:09:34:05 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 404 "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 104.28.164.242 - sliver85.eu - [02/Jul/2026:09:34:05 +0200] "GET /secrets.yml HTTP/2.0" 404 "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected]" 104.28.164.242 - sliver85.eu - [02/Jul/2026:09:34:05 +0200] "GET /config/application.properties HTTP/2.0" 404 "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.c ... show less	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-06-28 23:20:07 (4 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-06-28 06:55:05 (5 days ago)		Web App Attack
🇮🇹 mediarama.com	2026-06-27 20:06:00 (6 days ago)	Banned by Fail2Ban	Web App Attack
🇫🇷 Octopuce	2026-06-27 19:49:58 (6 days ago)	Aggressive web search of vulnerable pages: /.env /application.yml /.env /api/.env /admin/.env /.env. ... show more Aggressive web search of vulnerable pages: /.env /application.yml /.env /api/.env /admin/.env /.env.local /backend/.env ... show less	Web App Attack
Anonymous	2026-06-25 17:21:12 (1 week ago)	[25/Jun/2026:20:21:11 +0300] 178240807162.194644 104.28.164.242 45639 148.251.76.218 443 [25/Jun/202 ... show more [25/Jun/2026:20:21:11 +0300] 178240807162.194644 104.28.164.242 45639 148.251.76.218 443 [25/Jun/2026:20:21:11 +0300] 178240807166.271230 104.28.164.242 45639 148.251.76.218 443 show less	Web App Attack
🇦🇺 MAGIC	2026-06-23 05:01:26 (1 week ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TAY	2026-06-20 09:47:29 (1 week ago)	104.28.164.242 - - [20/Jun/2026:17:47:12 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4959 "-" "WordPress. ... show more 104.28.164.242 - - [20/Jun/2026:17:47:12 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4959 "-" "WordPress.com; https://wordpress.com" 104.28.164.242 - - [20/Jun/2026:17:47:19 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4959 "-" "WordPress.com; https://wordpress.com" 104.28.164.242 - - [20/Jun/2026:17:47:28 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4959 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" ... show less	Brute-Force
🇫🇷 Dampen59	2026-06-20 00:03:49 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 104.28.164.242 (CA/Canada/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 104.28.164.242 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-19 19:03:42 dovecot_plain authenticator failed for H=(worker.cloudflare.com) [104.28.164.242]:55686: 535 Incorrect authentication data ([email protected]) 2026-06-19 19:03:42 dovecot_plain authenticator failed for H=(worker.cloudflare.com) [104.28.164.242]:55691: 535 Incorrect authentication data ([email protected]) 2026-06-19 19:03:42 dovecot_plain authenticator failed for H=(worker.cloudflare.com) [104.28.164.242]:57358: 535 Incorrect authentication data ([email protected]) 2026-06-19 19:03:42 dovecot_plain authenticator failed for H=(worker.cloudflare.com) [104.28.164.242]:57349: 535 Incorrect authentication data ([email protected]) 2026-06-19 19:03:44 dovecot_login authenticator failed for H=(worker.cloudflare.com) [104.28.164.242]:57358: 535 Incorrect authentication data ([email protected]) show less	Port Scan

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.237

🇹🇷 185.219.133.156

🇨🇳 101.126.67.70

🇹🇹 2803:1500:1c00:1152:48cd:7334:aefc:d32f

🇺🇸 2607:f8b0:4001:c0e::121

🇭🇰 199.45.154.120

🇪🇨 186.68.83.104

🇩🇪 185.220.101.148

🇸🇬 178.128.98.148

🇯🇵 155.2.216.5

🇷🇺 138.124.69.150

🇺🇸 52.188.191.193

🇺🇸 35.196.255.72

🇺🇸 34.170.128.241

🇰🇷 20.194.4.121

🇳🇱 5.79.77.40

🇩🇪 193.124.20.235

🇺🇸 172.202.118.69

🇮🇳 144.24.123.141

🇹🇭 125.25.183.157