JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.208.133

104.28.208.133

Neutral Activity

10 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Cloudflare, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS13335

Domain Name

cloudflare.com

Country

🇨🇳 China

City

Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.28.208.133:

This IP address has been reported a total of 10 times from 7 distinct sources. 104.28.208.133 was first reported on September 21st 2023, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: Canada with 2 reports. The only category in these recent reports was: Bad Web Bot 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-07-08 10:03:20 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /english/rutte-defends-us-strikes-on-iran-a-necessary-response-after-the-ceasefire-was-violated/916659/ UA: Mozilla/5.0 (compatible; OSINT Dashboard/1.0) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-07-05 00:33:40 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /english/european-democrats-support-the-protests-in-tirana-europe-should-stand-by-the-young-people-raising-their-voices/911769/ UA: Mozilla/5.0 (compatible; OSINT Dashboard/1.0) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 xmission.com	2026-04-30 11:07:08 (4 months ago)	Blocked by UFW (TCP on 1) Source port: 43280 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 43280 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 104.28.208.133) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇺 Agrohim	2026-04-26 00:07:21 (4 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-04-14 12:08:48 (4 months ago)	Blocked by UFW (TCP on 18333) Source port: 17038 TTL: 50 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 18333) Source port: 17038 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 104.28.208.133) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-03-05 16:58:56 (5 months ago)	UFW Blocked [443/TCP] Source: 104.28.208.133:33418 TTL: 53 Lenth: 60 TOS: 0x00	Port Scan Web App Attack
🇬🇧 Epimetheus	2024-06-08 21:38:59 (2 years ago)	Unauthorized access attempts: From: 104.28.208.133 Method: HTTPS POST URI Path: /vendor/phpuni ... show more Unauthorized access attempts: From: 104.28.208.133 Method: HTTPS POST URI Path: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" show less	Web App Attack
🇺🇸 Nectarnetics	2024-06-08 13:50:09 (2 years ago)	(Reconnaissance\|Active Scanning - Web Services) from 104.28.208.133 URIs attempted: 1 User-Agent: Mo ... show more (Reconnaissance\|Active Scanning - Web Services) from 104.28.208.133 URIs attempted: 1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36 TTP: T1595.002 - Reconnaissance Samples: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php show less	Web App Attack
🇺🇸 Nectarnetics	2024-06-08 13:34:08 (2 years ago)	(Enumeration\|Scan) Source IP: 104.28.208.133 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ... show more (Enumeration\|Scan) Source IP: 104.28.208.133 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36 Path: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php show less	Web App Attack
🇨🇳 ThreatBook.io	2023-09-21 23:41:20 (2 years ago)	ThreatBook Intelligence: Scanner,Web Login Brute Force more details on https://threatbook.io/ip/104. ... show more ThreatBook Intelligence: Scanner,Web Login Brute Force more details on https://threatbook.io/ip/104.28.208.133 2023-09-21 10:54:14 /media/js/jquery-3.5.1.min.js 2023-09-21 10:54:15 /media/js/highcharts-more.js 2023-09-21 10:54:15 /media/js/jquery-ui-1.12.1.custom.min.js 2023-09-21 10:54:15 /media/css/font-awesome.min.css 2023-09-21 10:54:15 /media/js/modules/exporting.js 2023-09-21 10:54:15 /media/css/bootstrap-2.3.2.min.css 2023-09-21 10:54:15 /media/js/jquery-migrate-1.4.1.min.js 2023-09-21 10:54:14 / 2023-09-21 10:54:15 /media/js/jquery-ui-timepicker-addon.js 2023-09-21 10:54:15 /media/js/bootstrap.min.js show less	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 172.217.32.157

🇺🇸 18.235.81.246

🇳🇱 195.178.110.30

🇫🇷 188.165.236.183

🇸🇬 129.212.230.161

🇺🇸 98.192.74.183

🇫🇮 46.62.129.49

🇧🇷 45.162.112.34

🇳🇱 193.47.62.69

🇳🇱 185.136.15.90

🇺🇸 159.223.157.216

🇺🇸 142.93.90.17

🇮🇩 110.138.92.67

🇳🇬 102.88.137.80

🇺🇸 34.139.23.35

🇺🇸 18.235.158.19

🇮🇳 13.200.120.79

🇮🇳 171.76.83.87

🇺🇸 107.150.100.20

🇻🇳 27.79.42.125