104.28.197.208
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇰🇿 Kazakhstan
- City
- Aktobe, Aktobe
Abuse Reports
Total reports
72 from
38 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 big-cloud.nl |
Try to access /wp-content/plugins/gravityforms/readme.txt
|
Web App Attack | |
| 🇩🇪 msavo |
CIR Sentinel: cost_weighted_probe; 40.2s upstream time across 17 distinct failed paths; failed responses 77% in 120s; first=2026-11-10T20:45:46+00:00; last=2026-11-10T20:46:27+00:00; permanently blocked by local firewall.
|
Bad Web Bot Web App Attack | |
| 🇩🇪 Petros Stefanakis |
(wordpress,mod_security) Login failure/trigger from 104.28.197.208 (KZ/Kazakhstan/-)
|
SQL Injection Brute-Force | |
| 🇫🇷 masterguru |
(wordpress) Apache: Failed WordPress login from 104.28.197.208 (KR/South Korea/-): 10 in the last 3600 secs (0-180)
|
Hacking | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T22:19:52.000Z.
|
Web App Attack | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T17:00:33.000Z.
|
Web App Attack | |
| 🇦🇺 paulshipley.com.au |
|
Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
|
Exploited Host Web App Attack | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T12:17:46.000Z.
|
Web App Attack | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-07T07:10:52.000Z.
|
Web App Attack | |
| 🇭🇺 bcsaba |
Going for WP CVE-2026-63030
104.28.197.208 - - [04/Nov/2026:09:21:42 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
|
Web App Attack | |
| 🇩🇪 LRob |
Self-declared scanner | ua: wp2shell | 2026-11-03 05:39 UTC
|
Port Scan Web App Attack | |
| 🇩🇪 BlueWire Hosting |
Bad bot ignoring robot.txt
|
Bad Web Bot | |
| 🇩🇪 Viveronese |
Wordpress vulnerability scanning
|
Web App Attack | |
| 🇫🇷 masterguru |
(wordpress) Apache: Failed WordPress login from 104.28.197.208 (KR/South Korea/-): 10 in the last 3600 secs (0-180)
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown