AbuseIPDB » 104.28.166.239
104.28.166.239
This IP was reported 7 times. Confidence of
Abuse
is 46% : ?
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇺🇸
United States of America
City
Miami, Florida
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 104.28.166.239 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
104.28.166.239 was first reported on
June 29th 2026 , and the most recent report was
2 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇧
seniorlinuxadmin
2026-07-07 21:06:44
(2 hours ago)
104.28.166.239 - - [07/Jul/2026:22:06:42 +0100] "GET /z9x8c7v6b5-debug-trigger-seniorlinuxadmin.co.u ...
show more
104.28.166.239 - - [07/Jul/2026:22:06:42 +0100] "GET /z9x8c7v6b5-debug-trigger-seniorlinuxadmin.co.uk HTTP/2.0" 404 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
show less
Port Scan
Web App Attack
🇫🇮
Christopher Hughes
2026-07-07 21:03:33
(3 hours ago)
104.28.166.239 - - [07/Jul/2026:22:03:33 +0100] "GET /.env.example HTTP/2.0" 404 275 "-" "Mozilla/5. ...
show more
104.28.166.239 - - [07/Jul/2026:22:03:33 +0100] "GET /.env.example HTTP/2.0" 404 275 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
2026-07-07 13:03:49
(11 hours ago)
104.28.166.239 - - [07/Jul/2026:15:03:43 +0200] "GET /nginx_status HTTP/1.1" 403 124 "-" "Mozilla/5. ...
show more
104.28.166.239 - - [07/Jul/2026:15:03:43 +0200] "GET /nginx_status HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
104.28.166.239 - - [07/Jul/2026:15:03:43 +0200] "GET /wp-json HTTP/1.1" 403 124 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
104.28.166.239 - - [07/Jul/2026:15:03:44 +0200] "GET /rclone.conf HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] "
104.28.166.239 - - [07/Jul/2026:15:03:47 +0200] "GET /.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
104.28.166.239 - - [07/Jul/2026:15:03:48 +0200] "GET /.aws/credentials HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
104.28.166.239 - - [07/Jul/2026:15:03:48 +0200] "GET /.aws/config HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTM
...
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-07-07 10:24:33
(13 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇨🇭
backslash
2026-07-06 09:03:00
(1 day ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-07-06 07:26:50
(1 day ago)
104.28.166.239 - - [06/Jul/2026:10:26:45 +0300] "GET /admin/.env HTTP/1.1" 404 650 "-" "CCBot/2.0 (h ...
show more
104.28.166.239 - - [06/Jul/2026:10:26:45 +0300] "GET /admin/.env HTTP/1.1" 404 650 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
104.28.166.239 - - [06/Jul/2026:10:26:49 +0300] "GET /api/.env HTTP/1.1" 404 702 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
...
show less
Web App Attack
🇨🇿
lp
2026-06-29 01:51:21
(1 week ago)
Email account brute force: 1 attempts were recorded from 104.28.166.239
2026-06-29T03:03:23+02:00 wa ...
show more
Email account brute force: 1 attempts were recorded from 104.28.166.239
2026-06-29T03:03:23+02:00 warning: unknown[104.28.166.239]: SASL PLAIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: