JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.203.246

104.28.203.246 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Boston, Massachusetts

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.203.246

Whois 104.28.203.246

IP Abuse Reports for 104.28.203.246:

This IP address has been reported a total of 47 times from 14 distinct sources. 104.28.203.246 was first reported on September 26th 2023, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 marzzzello	2025-12-11 01:02:19 (9 months ago)	Ports: 24x 65020	Port Scan
🇩🇪 marzzzello	2025-12-10 03:54:33 (9 months ago)	Ports: 16x 65020, 8x 64869	Port Scan
🇩🇪 marzzzello	2025-12-10 03:02:09 (9 months ago)	Ports: 8x 64869, 16x 65020	Port Scan
🇪🇸 Global Cyber Police	2025-07-28 08:26:39 (1 year ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-05 09:36:41 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 05 04:36:35.490244 2024] [security2:error] [pid 30911] [client 104.28.203.246:64667] [client 104.28.203.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rayeliotschwartz.com"] [uri "/.git/config"] [unique_id "Zebno_ngmOaZjKDDolS67wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-03 16:50:29 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 03 11:50:21.430485 2024] [security2:error] [pid 10892] [client 104.28.203.246:12736] [client 104.28.203.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hollyndlaw.com"] [uri "/.git/config"] [unique_id "ZeSqTYseMBosBPgo4qPvJAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-29 00:46:21 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 28 19:46:17.083666 2024] [security2:error] [pid 30951] [client 104.28.203.246:50796] [client 104.28.203.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chateau-saleza-bruges.com"] [uri "/.git/config"] [unique_id "Zd_T2fVT_f_ctRiuKA3obAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 John Hencke	2024-02-29 00:00:00 (2 years ago)	Brute Force Attack on Citrix Netscaler. Attempts: 1	Brute-Force
🇺🇸 TPI-Abuse	2024-02-28 17:20:54 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 28 12:20:49.813937 2024] [security2:error] [pid 19229] [client 104.28.203.246:10742] [client 104.28.203.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cliniquecavalancia.com"] [uri "/.git/config"] [unique_id "Zd9rcdsOLqmIjsQDjIYWBAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 unichrome	2024-02-28 00:55:00 (2 years ago)	SSL brute force	Brute-Force
🇺🇸 TPI-Abuse	2024-02-27 01:06:38 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 26 20:06:32.222139 2024] [security2:error] [pid 2668] [client 104.28.203.246:26679] [client 104.28.203.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaitmakesthat.com"] [uri "/.git/config"] [unique_id "Zd01mPMyQC5iVYJXDJ8LWAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ISPLtd	2024-02-26 11:11:30 (2 years ago)	104.28.203.246 - - [26/Feb/2024:03:11:29 -0800] "GET /.git/config ...	Hacking Web App Attack
🇺🇸 physke	2024-02-25 00:50:30 (2 years ago)	REQUESTED PAGE: /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2024-02-24 20:50:24 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 24 15:50:17.302496 2024] [security2:error] [pid 27204] [client 104.28.203.246:31256] [client 104.28.203.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brasscadillac.com"] [uri "/.git/config"] [unique_id "ZdpWifwuB65cs_X-yGLzfAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-23 02:51:35 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 22 21:51:30.165533 2024] [security2:error] [pid 27352] [client 104.28.203.246:41843] [client 104.28.203.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scr-publications.com"] [uri "/.git/config"] [unique_id "ZdgIMp8jlZ5x1kGz4FK7bQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.35

🇭🇰 202.155.236.242

🇺🇸 161.0.2.49

🇭🇰 118.193.43.158

🇲🇾 113.211.142.0

🇰🇷 112.168.1.182

🇧🇬 109.160.32.47

🇺🇸 68.109.57.143

🇺🇸 20.55.92.115

🇬🇧 2a06:4880:4000::56

🇺🇸 209.141.47.217

🇧🇪 207.175.186.229

🇳🇱 193.47.62.69

🇳🇱 165.232.90.182

🇳🇬 165.154.11.247

🇸🇬 152.42.217.54

🇧🇬 109.160.32.77

🇺🇸 54.196.138.49

🇺🇸 2600:1f18:360e:f600:665a:16d7:2968:c864

🇮🇳 2401:4900:1cbd:570:ccbf:607b:f64:c275