JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.207.215

104.28.207.215 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 90%: ?

90%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇩🇪 Germany
City	Leipzig, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.207.215

Whois 104.28.207.215

IP Abuse Reports for 104.28.207.215:

This IP address has been reported a total of 40 times from 29 distinct sources. 104.28.207.215 was first reported on February 6th 2024, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ba-Yu	2026-07-27 07:27:45 (43 minutes ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2026-07-27 06:59:46 (1 hour ago)	Automatically blocked after 4 security events. Observed sensitive configuration-file probes. Source: ... show more Automatically blocked after 4 security events. Observed sensitive configuration-file probes. Source: Cloudflare security controls. show less	Hacking Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-27 05:05:36 (3 hours ago)	[redacted] 104.28.207.215 - - [27/Jul/2026:06:05:33 +0100] "HEAD /.git/HEAD HTTP/2.0" 301 261 "https ... show more [redacted] 104.28.207.215 - - [27/Jul/2026:06:05:33 +0100] "HEAD /.git/HEAD HTTP/2.0" 301 261 "https://[redacted]/.git/HEAD" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://[redacted]/bot)" [redacted] 104.28.207.215 - - [27/Jul/2026:06:05:33 +0100] "HEAD /.[redacted] HTTP/2.0" 301 292 "https://[redacted]/.[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 wordpresshosting.solutions	2026-07-27 04:47:32 (3 hours ago)	Web app vulnerability scanning detected. Evidence: 104.28.207.215 - - [27/Jul/2026:04:47:29 +0000] " ... show more Web app vulnerability scanning detected. Evidence: 104.28.207.215 - - [27/Jul/2026:04:47:29 +0000] "HEAD /.aws/credentials HTTP/1.1" 404 1172 "https://[DOMAIN]/.aws/credentials" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.207.215 - - [27/Jul/2026:04:47:32 +0000] "HEAD /.aws/credentials HTTP/1.1" 404 6157 "https://[DOMAIN]/.aws/credentials" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36" show less	Web App Attack
🇫🇮 000rosiu	2026-07-27 03:16:45 (4 hours ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpo ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /app \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 Klaverstyn	2026-07-27 01:53:50 (6 hours ago)	Repeated 403 Forbidden responses	Web App Attack
🇫🇷 Catalin Negru	2026-07-27 01:52:54 (6 hours ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇫🇷 Baking333	2026-07-27 01:02:09 (7 hours ago)	[redacted] 104.28.207.215 - - [27/Jul/2026:02:02:08 +0100] "HEAD /.env HTTP/1.1" 302 1156 0/40229 "h ... show more [redacted] 104.28.207.215 - - [27/Jul/2026:02:02:08 +0100] "HEAD /.env HTTP/1.1" 302 1156 0/40229 "https://[redacted]/search?q=[redacted]" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36" [redacted] 104.28.207.215 - - [27/Jul/2026:02:02:08 +0100] "HEAD /.[redacted] HTTP/1.1" 302 1156 0/42599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 00:11:39 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.28.207.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.207.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 20:11:30.391186 2026] [security2:error] [pid 3293393:tid 3293393] [client 104.28.207.215:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shubil.com"] [uri "/.git/HEAD"] [unique_id "amaiMrbLNXDY3vVgYz6iIgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 23:36:05 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.28.207.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.207.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 19:35:57.189924 2026] [security2:error] [pid 2849136:tid 2849136] [client 104.28.207.215:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abdulhameeds.art"] [uri "/.git/HEAD"] [unique_id "amaZ3cxlAfxyyX03gGWCsAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Cuteminded	2026-07-26 23:10:04 (9 hours ago)	Detected web attack patterns	Web App Attack
🇹🇭 thaizone.com	2026-07-26 23:08:40 (9 hours ago)	Brute Force Attack on a Web Resources (probe) #1	DDoS Attack Web Spam Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-26 22:40:22 (9 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Mangelot Hosting	2026-07-26 22:35:01 (9 hours ago)	(modsecurity) srv201 ModSecurity 104.28.207.215 (CZ/Czechia/-): 30 in the last 3600 secs; Ports: ; ... show more (modsecurity) srv201 ModSecurity 104.28.207.215 (CZ/Czechia/-): 30 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇦🇺 nzhost.co.nz	2026-07-26 21:21:57 (10 hours ago)	$f2bV_matches	Hacking Brute-Force

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a09:bac5:55ff:1d05::2e4:ab

🇸🇬 145.223.140.4

🇩🇪 130.12.180.65

🇺🇸 103.234.62.3

🇺🇸 85.254.139.65

🇺🇸 34.86.57.163

🇵🇪 181.224.37.20

🇺🇸 172.232.8.247

🇺🇸 172.217.107.22

🇩🇪 167.94.145.20

🇵🇾 148.222.129.200

🇸🇬 145.223.131.240

🇨🇳 123.56.24.159

🇨🇳 106.112.194.160

🇺🇸 91.230.168.232

🇸🇬 84.75.150.255

🇺🇸 72.179.206.48

🇺🇸 66.132.224.27

🇺🇸 47.251.86.119

🇩🇪 46.225.23.118