This IP address has been reported a total of
27
times from
23 distinct
sources.
104.28.167.5 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 7
reports;
Germany
with 6
reports;
United Kingdom of Great Britain and Northern Ireland
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
20
times;
Bad Web Bot
8
times;
Brute-Force
3
times;
Port Scan
1
time;
Exploited Host
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.167.5 - - [23/Oct/2026:18:03:12 +0200] "GET /.aws/credentials HTTP/1.1" 404 7904 "https://www.google.com/search?q=apivinkm.bdaconnect.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
...
show less
Bad Web Bot
Web App Attack
Anonymous
104.28.167.5 - - [23/Oct/2026:05:28:11 +0000] "GET /.env.bak HTTP/1.1" 302 443 "https://www.google.c ...
show more104.28.167.5 - - [23/Oct/2026:05:28:11 +0000] "GET /.env.bak HTTP/1.1" 302 443 "https://www.google.com/search?q=simon.butcher.be" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
[Fri Oct 23 04:17:28.683411 2026] [authz_core:error] [pid 3972703:tid 3972703] [client 104.28.167.5: ...
show more[Fri Oct 23 04:17:28.683411 2026] [authz_core:error] [pid 3972703:tid 3972703] [client 104.28.167.5:64988] AH01630: client denied by server configuration: /var/www/html/six.solution.it/.env.sample, referer: http://www.six.solution.it/.env.sample
show less
