JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.228.57

104.28.228.57 was found in our database!

This IP was reported 170 times. Confidence of Abuse is 100%: ?

100%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇫🇷 France
City	Strasbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.228.57

Whois 104.28.228.57

IP Abuse Reports for 104.28.228.57:

This IP address has been reported a total of 170 times from 103 distinct sources. 104.28.228.57 was first reported on March 12th 2025, and the most recent report was 59 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Al Coholic	2026-06-13 01:14:24 (59 minutes ago)	Detected By Fail2ban	Bad Web Bot
🇫🇮 Christopher Hughes	2026-06-12 20:16:06 (5 hours ago)	[Fri Jun 12 21:16:06.274982 2026] [proxy_fcgi:error] [pid 682137:tid 139822224094784] [client 104.28 ... show more [Fri Jun 12 21:16:06.274982 2026] [proxy_fcgi:error] [pid 682137:tid 139822224094784] [client 104.28.228.57:62303] AH01071: Got error 'Primary script unknown' [Fri Jun 12 21:16:06.319162 2026] [proxy_fcgi:error] [pid 682137:tid 139821687223872] [client 104.28.228.57:62303] AH01071: Got error 'Primary script unknown' [Fri Jun 12 21:16:06.362841 2026] [proxy_fcgi:error] [pid 682137:tid 139822742292032] [client 104.28.228.57:62303] AH01071: Got error 'Primary script unknown' [Fri Jun 12 21:16:06.406467 2026] [proxy_fcgi:error] [pid 682137:tid 139822215702080] [client 104.28.228.57:62303] AH01071: Got error 'Primary script unknown' [Fri Jun 12 21:16:06.451019 2026] [proxy_fcgi:error] [pid 682137:tid 139821167138368] [client 104.28.228.57:62303] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇬🇧 consul.to	2026-06-12 12:49:12 (13 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-12 12:27:20 (13 hours ago)	104.28.228.57 - - [12/Jun/2026:15:27:19 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 702 "-" " ... show more 104.28.228.57 - - [12/Jun/2026:15:27:19 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 702 "-" "Go-http-client/1.1" 104.28.228.57 - - [12/Jun/2026:15:27:19 +0300] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 404 702 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-12 12:22:45 (13 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.28.228.57 (CA/Canada/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.28.228.57 (CA/Canada/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 ParaBug	2026-06-12 10:24:49 (15 hours ago)	104.28.228.57 - - [12/Jun/2026:12:24:49 +0200] "GET /ms-themes.php HTTP/2.0" 401 521 "http://test.my ... show more 104.28.228.57 - - [12/Jun/2026:12:24:49 +0200] "GET /ms-themes.php HTTP/2.0" 401 521 "http://test.myviven.ch/ms-themes.php" "Go-http-client/2.0" ... show less	Phishing Brute-Force Web App Attack
🇳🇱 Brict IT	2026-06-11 15:34:40 (1 day ago)		Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-06-11 13:20:32 (1 day ago)	wordpress scan on 305.today/wp-content/themes/txets.php — WellSpr.ing/NetSentinel civic-AI security ... show more wordpress scan on 305.today/wp-content/themes/txets.php — WellSpr.ing/NetSentinel civic-AI security layer show less	Bad Web Bot Web App Attack
Anonymous	2026-06-11 11:24:51 (1 day ago)	104.28.228.57 - - [11/Jun/2026:13:24:51 +0200] "GET / HTTP/1.1" 301 169 "-" "Go-http-client/1.1"	Bad Web Bot
🇩🇪 pltcldvlpr	2026-06-11 10:06:00 (1 day ago)	CMS/framework probe: 104.28.228.57 - - [11/Jun/2026:12:05:58 +0200] "GET /wp-admin/admin-ajax.php HT ... show more CMS/framework probe: 104.28.228.57 - - [11/Jun/2026:12:05:58 +0200] "GET /wp-admin/admin-ajax.php HTTP/2.0" 401 188 "http://munin.netznarbe.de/wp-admin/admin-ajax.php" "Go-http-client/2.0" asn=13335 org="Cloudflare, Inc." country=CA ... show less	Web App Attack
🇳🇱 Site.eu	2026-06-11 07:47:44 (1 day ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-06-11 03:39:23 (1 day ago)	104.28.228.57 - - [11/Jun/2026:05:39:23 +0200] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1 ... show more 104.28.228.57 - - [11/Jun/2026:05:39:23 +0200] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 404 444 "-" "Go-http-client/1.1" 104.28.228.57 - - [11/Jun/2026:05:39:23 +0200] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 404 249 "-" "Go-http-client/1.1" 104.28.228.57 - - [11/Jun/2026:05:39:23 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 444 "-" "Go-http-client/1.1" 104.28.228.57 - - [11/Jun/2026:05:39:23 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 249 "-" "Go-http-client/1.1" 104.28.228.57 - - [11/Jun/2026:05:39:23 +0200] "GET /wp-content/index.php HTTP/1.1" 404 444 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇦🇺 2000cn.com.au	2026-06-11 01:04:28 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇷🇺 DZBOT	2026-06-11 00:35:52 (2 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 alecj.com	2026-06-10 23:36:34 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking

Showing 1 to 15 of 170 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇳🇱 185.223.235.55

🇷🇴 143.20.185.242

🇮🇳 139.59.59.165

🇧🇩 103.85.157.151

🇷🇺 94.25.174.250

🇱🇹 81.30.98.158

🇸🇪 74.241.134.117

🇩🇪 69.5.169.124

🇳🇱 52.232.19.79

🇷🇴 2.57.121.25

🇬🇧 217.146.80.120

🇩🇪 167.172.184.143

🇮🇳 167.71.239.213

🇺🇸 134.209.221.165

🇰🇪 102.209.57.109

🇳🇱 85.11.167.30

🇪🇸 79.117.133.5

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141