JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.218.136

104.28.218.136 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 4%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇮🇩 Indonesia
City	Bandung, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.218.136

Whois 104.28.218.136

IP Abuse Reports for 104.28.218.136:

This IP address has been reported a total of 128 times from 49 distinct sources. 104.28.218.136 was first reported on December 16th 2022, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-07-03 18:47:01 (22 hours ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇫🇷 dynamix	2026-04-24 06:51:41 (2 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-03-01 12:24:06 (4 months ago)	Querying for PHP services on a non-PHP site (/xmlrpc.php)	Web App Attack
🇩🇪 kjaerulff	2026-02-22 23:13:49 (4 months ago)	Failed Wordpress login using xmlrpc.php	Web App Attack
Anonymous	2026-02-19 09:07:22 (4 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 masterguru	2026-02-19 05:14:32 (4 months ago)	Port Scan detected from 104.28.218.136 (CA/Canada/-). 11 hits in the last 25 seconds (0-169)	Port Scan
🇪🇸 robotstxt	2026-02-16 15:48:27 (4 months ago)	104.28.218.136 - - [16/Feb/2026:15:47:40 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 48165 ... show more 104.28.218.136 - - [16/Feb/2026:15:47:40 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 48165 "-" "python-requests/2.32.5" "-" 104.28.218.136 - - [16/Feb/2026:15:47:42 +0000] "GET /wp-login.php/administrator/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" 104.28.218.136 - - [16/Feb/2026:15:47:43 +0000] "POST /wp-login.php/admin/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" 104.28.218.136 - - [16/Feb/2026:15:47:40 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 48165 "-" rt="0.355" "python-requests/2.32.5" "-" h="economipedia.com" sn="economipedia.com" ru="/wp-login.php/wp-login.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia83.sock" us="404" uc ... show less	Bad Web Bot
🇺🇸 masterguru	2026-02-16 14:31:28 (4 months ago)	Port Scan detected from 104.28.218.136 (CA/Canada/-). 11 hits in the last 55 seconds (0-169)	Port Scan
🇪🇸 robotstxt	2026-02-16 06:41:33 (4 months ago)	104.28.218.136 - - [16/Feb/2026:06:41:05 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 43368 ... show more 104.28.218.136 - - [16/Feb/2026:06:41:05 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 43368 "-" rt="1.022" "python-requests/2.32.5" "-" h="fundaciopacopuerto.cat" sn="fundaciopacopuerto.cat" ru="/wp-login.php/wp-login.php" u="/index.php" ucs="-" ua="unix:/var/run/php/fundacio82.sock" us="404" uct="0.000" urt="1.021" 104.28.218.136 - - [16/Feb/2026:06:41:06 +0000] "GET /wp-login.php/administrator/index.php HTTP/1.1" 404 31 "-" rt="0.369" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" h="fundaciopacopuerto.cat" sn="fundaciopacopuerto.cat" ru="/wp-login.php/administrator/index.php" u="/index.php" ucs="-" ua="unix:/var/run/php/fundacio82.sock" us="301" uct="0.000" urt="0.368" 104.28.218.136 - - [16/Feb/2026:06:41:07 +0000] "POST /wp-login.php/admin/index.php HTTP/1.1" 404 31 "-" rt="0.441" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.2008 ... show less	Bad Web Bot
🇪🇸 robotstxt	2026-02-11 06:03:10 (4 months ago)	104.28.218.136 - - [11/Feb/2026:06:02:09 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 48169 ... show more 104.28.218.136 - - [11/Feb/2026:06:02:09 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 48169 "-" rt="0.394" "python-requests/2.32.5" "-" h="economipedia.com" sn="economipedia.com" ru="/wp-login.php/wp-login.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia83.sock" us="404" uct="0.000" urt="0.394" 104.28.218.136 - - [11/Feb/2026:06:02:09 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 48169 "-" "python-requests/2.32.5" "-" 104.28.218.136 - - [11/Feb/2026:06:02:10 +0000] "GET /wp-login.php/administrator/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" 104.28.218.136 - - [11/Feb/2026:06:02:12 +0000] "POST /wp-login.php/admin/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobil ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-28 15:38:45 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.28.218.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.218.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 10:38:38.835410 2026] [security2:error] [pid 23965:tid 23965] [client 104.28.218.136:22984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "admin.turedinmobiliaria.com"] [uri "/.env"] [unique_id "aXotfrlaE3n6jbg84ePxIAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Incidents Response Neptus Team	2026-01-16 18:20:00 (5 months ago)	Report Abuse IP	Hacking SQL Injection Exploited Host Web App Attack
🇳🇿 Antinson	2026-01-05 20:54:42 (5 months ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot
🇮🇹 VHosting	2026-01-05 20:40:12 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇮🇩 sockominfo	2025-12-08 23:57:39 (6 months ago)	[WAZUH] SUPPRESSED: IP 104.28.218.136 blocked - 8 times fired in 6 hour	Hacking Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4884:9000::ae

🇹🇼 198.235.24.43

🇯🇵 20.89.133.189

🇮🇳 223.185.17.173

🇨🇭 209.99.189.173

🇦🇲 176.32.193.16

🇧🇷 167.249.121.15

🇺🇸 162.216.150.224

🇪🇸 94.73.33.76

🇺🇸 47.145.133.137

🇨🇭 2a07:6d80:1e01:3a13::

🇵🇰 210.56.28.17

🇲🇽 207.248.113.64

🇨🇱 186.106.33.64

🇨🇳 182.116.222.48

🇧🇷 181.191.194.175

🇹🇷 176.234.9.161

🇭🇰 152.32.252.233

🇯🇵 112.138.227.102

🇱🇹 45.227.254.170