This IP address has been reported a total of
29
times from
20 distinct
sources.
104.28.195.234 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
Switzerland
with 2
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
11
times;
Hacking
8
times;
Brute-Force
4
times;
Bad Web Bot
2
times;
Port Scan
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[MonOct1215:43:55.5814292026][security2:error][pid2745413:tid2745528][client104.28.195.234:0]ModSecu ...
show more[MonOct1215:43:55.5814292026][security2:error][pid2745413:tid2745528][client104.28.195.234:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ruberticonsulting.ch\"][uri\"/xmlrpc.php\"][unique_id\"aszkGxrn8COcEWxEgvQlzAAAAQo\"]
show less
Hacking
Web App Attack
Anonymous
[redacted] 104.28.195.234 - - [10/Oct/2026:11:17:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" " ...
show more[redacted] 104.28.195.234 - - [10/Oct/2026:11:17:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36"
[redacted] 104.28.195.234 - - [10/Oct/2026:11:17:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.0.0 Safari/537.36"
[redacted] 104.28.195.234 - - [10/Oct/2026:11:17:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/90.0.0.0 Safari/537.36"
[redacted] 104.28.195.234 - - [10/Oct/2026:11:17:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/98.0.0.0 Safari/537.36"
[redacted] 104.28.195.234 - - [10/Oct/2026:11:17:51
...
show less
Hacking
Web App Attack
Anonymous
[redacted] 104.28.195.234 - - [09/Oct/2026:16:58:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more[redacted] 104.28.195.234 - - [09/Oct/2026:16:58:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/72.0.0.0 Safari/537.36"
[redacted] 104.28.195.234 - - [09/Oct/2026:16:58:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36"
[redacted] 104.28.195.234 - - [09/Oct/2026:16:58:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/71.0.0.0 Safari/537.36"
[redacted] 104.28.195.234 - - [09/Oct/2026:16:58:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.0.0 Safari/537.36"
[redacted] 104.28.195.234 - - [09/Oct/2026:16:59:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0
...
show less
[FriOct0915:18:05.0328742026][security2:error][pid2697889:tid2698604][client104.28.195.234:0]ModSecu ...
show more[FriOct0915:18:05.0328742026][security2:error][pid2697889:tid2698604][client104.28.195.234:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ruberticonsulting.ch\"][uri\"/xmlrpc.php\"][unique_id\"asjpjbxzMh6lCZz3d3D1MgAAAJc\"]
show less