JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.222.43

104.28.222.43 was found in our database!

This IP was reported 701 times. Confidence of Abuse is 40%: ?

40%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.222.43

Whois 104.28.222.43

IP Abuse Reports for 104.28.222.43:

This IP address has been reported a total of 701 times from 118 distinct sources. 104.28.222.43 was first reported on April 15th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 JakoBian98	2026-07-24 23:13:47 (2 days ago)	graphiafinans.com: sir/kimlik bilgisi tarama path'i denendi: /secrets.json	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-24 10:27:56 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 104.28.222.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.28.222.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:27:50.914238 2026] [security2:error] [pid 200389:tid 200389] [client 104.28.222.43:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blog.nyemdr.com"] [uri "/.env"] [unique_id "amM-JunvCZPKYDVEFUuUZAAAAA0"], referer: https://www.google.com/search?q=www.blog.nyemdr.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-07-12 05:45:45 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/eksrtadim/ UA: manager(+internet-surf) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 backslash	2026-07-03 02:36:02 (3 weeks ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇫🇷 MatStef132	2026-06-26 12:11:26 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-06-12 22:47:20 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 Baking333	2026-06-09 16:58:53 (1 month ago)	[redacted] 104.28.222.43 - - [09/Jun/2026:17:58:49 +0100] "GET /admin/.env HTTP/1.1" 302 5263 0/3562 ... show more [redacted] 104.28.222.43 - - [09/Jun/2026:17:58:49 +0100] "GET /admin/.env HTTP/1.1" 302 5263 0/35626 "http://[redacted]/admin/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" [redacted] 104.28.222.43 - - [09/Jun/2026:17:58:52 +0100] "GET /app/.env HTTP/1.1" 302 1534 0/39290 "http://[redacted]/app/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-09 14:12:46 (1 month ago)	[redacted] 104.28.222.43 - - [09/Jun/2026:15:12:41 +0100] "GET /admin/.env HTTP/1.1" 302 5313 0/3853 ... show more [redacted] 104.28.222.43 - - [09/Jun/2026:15:12:41 +0100] "GET /admin/.env HTTP/1.1" 302 5313 0/38537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" [redacted] 104.28.222.43 - - [09/Jun/2026:15:12:44 +0100] "GET / HTTP/1.1" 200 13012 0/92909 "https://[redacted]/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-09 03:20:56 (1 month ago)	(mod_security-custom) mod_security (id:210492) triggered by 104.28.222.43 (CA/Canada/Ontario/Toronto ... show more (mod_security-custom) mod_security (id:210492) triggered by 104.28.222.43 (CA/Canada/Ontario/Toronto/-/[AS13335 CLOUDFLARENET]): 1 in the last 3600 secs (0-srv1) show less	Hacking
🇷🇺 Reaper	2026-06-09 02:38:25 (1 month ago)	GET /admin/.env	Web App Attack
🇫🇷 Baking333	2026-06-09 01:08:26 (1 month ago)	[redacted] 104.28.222.43 - - [09/Jun/2026:02:08:24 +0100] "GET /config/.env HTTP/1.1" 302 5253 0/911 ... show more [redacted] 104.28.222.43 - - [09/Jun/2026:02:08:24 +0100] "GET /config/.env HTTP/1.1" 302 5253 0/91138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" [redacted] 104.28.222.43 - - [09/Jun/2026:02:08:24 +0100] "GET / HTTP/1.1" 200 7648 0/161449 "https://[redacted]/config/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-08 19:12:32 (1 month ago)	[redacted] 104.28.222.43 - - [08/Jun/2026:20:12:29 +0100] "GET /backend/.env HTTP/1.1" 302 1564 0/58 ... show more [redacted] 104.28.222.43 - - [08/Jun/2026:20:12:29 +0100] "GET /backend/.env HTTP/1.1" 302 1564 0/584738 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" [redacted] 104.28.222.43 - - [08/Jun/2026:20:12:29 +0100] "GET /.env_secret HTTP/1.1" 302 5293 0/192052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 Major Hostility	2026-06-08 15:42:19 (1 month ago)	"GET /admin/.env HTTP/1.1" 404 "GET /.env.old HTTP/1.1" 404 "GET /.env.backup HTTP/1.1" 404	Web App Attack
🇫🇷 ELYAZ	2026-06-08 03:56:05 (1 month ago)	(y3) Failed access -byebye- from 104.28.222.43 (SG/Singapore/-): (CF_ENABLE)	Hacking
🇫🇷 MatStef132	2026-06-07 18:59:57 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot

Showing 1 to 15 of 701 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 202.88.249.55

🇺🇸 146.190.149.252

🇯🇵 122.25.147.10

🇺🇸 50.231.243.28

🇧🇪 34.53.209.89

🇷🇺 31.173.66.222

🇧🇷 205.210.31.254

🇧🇷 205.210.31.212

🇺🇸 193.26.115.91

🇮🇳 190.92.174.127

🇺🇸 172.202.118.41

🇺🇸 147.185.132.88

🇸🇬 145.223.134.21

🇺🇸 142.4.15.137

🇭🇰 118.193.37.50

🇨🇳 115.190.192.7

🇺🇸 107.174.1.138

🇳🇴 85.19.195.12

🇳🇱 81.19.216.104

🇩🇪 77.110.107.153