JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.228.108

104.28.228.108 was found in our database!

This IP was reported 245 times. Confidence of Abuse is 46%: ?

46%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇷🇺 Russian Federation
City	Saint Petersburg, St.-Petersburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.228.108

Whois 104.28.228.108

IP Abuse Reports for 104.28.228.108:

This IP address has been reported a total of 245 times from 53 distinct sources. 104.28.228.108 was first reported on June 30th 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-19 22:55:51 (2 hours ago)	104.28.228.108 - - [20/Jun/2026:00:55:51 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.co ... show more 104.28.228.108 - - [20/Jun/2026:00:55:51 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" show less	Hacking Web App Attack
Anonymous	2026-06-18 15:05:28 (1 day ago)	104.28.228.108 - - [18/Jun/2026:17:05:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by ... show more 104.28.228.108 - - [18/Jun/2026:17:05:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 104.28.228.108 - - [18/Jun/2026:17:05:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 104.28.228.108 - - [18/Jun/2026:17:05:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/13.0; WordPress/6.2; http://site50048909.com" 104.28.228.108 - - [18/Jun/2026:17:05:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/13.0; WordPress/6.2; http://site50048909.com" 104.28.228.108 - - [18/Jun/2026:17:05:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" ... show less	Brute-Force Web App Attack
🇬🇧 poundawebsiteltd	2026-06-12 21:36:18 (1 week ago)	WP Exploit attempt. Evidence: beanietools.dev:443 104.28.228.108 - - [12/Jun/2026:22:36:14 +0100] PO ... show more WP Exploit attempt. Evidence: beanietools.dev:443 104.28.228.108 - - [12/Jun/2026:22:36:14 +0100] POST /xmlrpc.php HTTP/1.1 200 3501 - Jetpack/12.5; WordPress/6.4; http://[REDACTED_DOMAIN] show less	Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-09 23:28:24 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/-	Web App Attack
🇫🇷 masterguru	2026-06-08 11:53:17 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-08 02:55:16 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 104.28.228.108 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 104.28.228.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:55:09.932060 2026] [security2:error] [pid 1216:tid 1216] [client 104.28.228.108:20085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.28.228.108 (+1 hits since last alert)\|pastorjohndunning.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pastorjohndunning.com"] [uri "/xmlrpc.php"] [unique_id "aiYvDbB3mX2KPlzeE2P5MgAAAGc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-03 03:56:39 (2 weeks ago)	Blocked by UFW (TCP on 55553) Source port: 31164 TTL: 48 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 55553) Source port: 31164 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 104.28.228.108) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Sklurk	2026-05-15 13:51:32 (1 month ago)	Web App Attack	Web App Attack
🇨🇳 pengpeng	2026-05-13 20:46:58 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 37034 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 37034 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-05-06 10:01:18 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 34039 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 34039 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-04-29 03:49:49 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 39200 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 39200 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-04-27 16:09:30 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 34039 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 34039 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-27 07:59:10 (1 month ago)	Blocked by UFW (TCP on 20005) Source port: 41359 TTL: 42 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 20005) Source port: 41359 TTL: 42 Packet length: 60 TOS: 0x08 This report (for 104.28.228.108) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-25 05:08:48 (1 month ago)	Blocked by UFW (TCP on 20005) Source port: 38593 TTL: 42 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 20005) Source port: 38593 TTL: 42 Packet length: 60 TOS: 0x08 This report (for 104.28.228.108) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-24 08:09:28 (1 month ago)	Blocked by UFW (TCP on 6969) Source port: 55208 TTL: 43 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6969) Source port: 55208 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 104.28.228.108) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 245 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.206.139

🇭🇰 165.154.1.18

🇺🇸 147.185.132.115

🇩🇪 128.1.34.69

🇳🇱 89.21.67.166

🇸🇪 80.78.218.84

🇳🇱 45.148.10.152

🇨🇳 182.119.229.226

🇺🇸 147.185.132.136

🇮🇳 122.179.11.120

🇵🇭 112.198.4.45

🇨🇳 101.126.67.70

🇺🇸 100.29.192.38

🇺🇸 98.114.87.239

🇳🇱 91.92.40.4

🇸🇬 43.160.210.225

🇷🇴 2.57.122.177

🇷🇴 2.57.121.25

🇭🇰 199.45.155.67

🇹🇼 198.235.24.118