JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.228.58

104.28.228.58 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 100%: ?

100%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇫🇷 France
City	Strasbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.228.58

Whois 104.28.228.58

IP Abuse Reports for 104.28.228.58:

This IP address has been reported a total of 128 times from 78 distinct sources. 104.28.228.58 was first reported on October 10th 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-14 05:36:00 (21 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-12 08:09:06 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 webanyone	2026-06-11 13:45:28 (3 days ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
🇳🇱 ParaBug	2026-06-11 09:20:29 (3 days ago)	104.28.228.58 - - [11/Jun/2026:11:20:29 +0200] "GET /chosen.php?p= HTTP/1.1" 301 495 "-" "Go-http-cl ... show more 104.28.228.58 - - [11/Jun/2026:11:20:29 +0200] "GET /chosen.php?p= HTTP/1.1" 301 495 "-" "Go-http-client/1.1" ... show less	Phishing Brute-Force Web App Attack
🇬🇧 poundawebsiteltd	2026-06-11 08:37:25 (3 days ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 104.28.228.58 - - [11/Jun/2026:09:37:23 ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 104.28.228.58 - - [11/Jun/2026:09:37:23 +0100] GET /style.php HTTP/1.1 403 158 - Go-http-client/1.1 show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-11 08:23:47 (3 days ago)	104.28.228.58 - - [11/Jun/2026:11:23:46 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 707 "-" " ... show more 104.28.228.58 - - [11/Jun/2026:11:23:46 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 707 "-" "Go-http-client/1.1" 104.28.228.58 - - [11/Jun/2026:11:23:46 +0300] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 404 707 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇮 cleverest.eu	2026-06-08 15:05:51 (6 days ago)	MimirWAF has 19 incidents from 1 distinct domain => {"bad_request_uri / script_kiddie_detection","bl ... show more MimirWAF has 19 incidents from 1 distinct domain => {"bad_request_uri / script_kiddie_detection","blacklisted_access / definite_repeat_offender"} show less	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-06-08 12:21:26 (6 days ago)	104.28.228.58 - - [08/Jun/2026:15:21:23 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 715 "-" " ... show more 104.28.228.58 - - [08/Jun/2026:15:21:23 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 715 "-" "Go-http-client/1.1" 104.28.228.58 - - [08/Jun/2026:15:21:24 +0300] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 404 715 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 jormaster3k	2026-06-08 05:48:19 (6 days ago)	Attack against Apache (too many 404s)	Web App Attack
🇳🇱 Site.eu	2026-06-08 03:09:50 (6 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Tamsy	2026-06-07 17:19:25 (1 week ago)	HTTPD - Web Application scripting attack	Web App Attack
🇩🇪 bogdanv	2026-06-07 15:01:32 (1 week ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-07 02:29:25 (1 week ago)	Scenarios: http-admin-interface-probing, http-probing, http-wordpress-scan Total requests: 32 [07/Ju ... show more Scenarios: http-admin-interface-probing, http-probing, http-wordpress-scan Total requests: 32 [07/Jun/2026:02:29:23 +0000] [Client: 104.28.228.58] GET [404] "/ms-themes.php" User-Agent: "Go-http-client/1.1" [07/Jun/2026:02:29:23 +0000] [Client: 104.28.228.58] GET [404] "/chosen.php?p=" User-Agent: "Go-http-client/1.1" [07/Jun/2026:02:29:23 +0000] [Client: 104.28.228.58] GET [404] "/file.php" User-Agent: "Go-http-client/1.1" [07/Jun/2026:02:29:23 +0000] [Client: 104.28.228.58] GET [404] "/flower.php" User-Agent: "Go-http-client/1.1" [07/Jun/2026:02:29:23 +0000] [Client: 104.28.228.58] GET [404] "/gifclass.php" User-Agent: "Go-http-client/1.1" [07/Jun/2026:02:29:23 +0000] [Client: 104.28.228.58] GET [404] "/bless.php" User-Agent: "Go-http-client/1.1" [07/Jun/2026:02:29:23 +0000] [Client: 104.28.228.58] GET [404] "/class-t.api.php" User-Agent: "Go-http-client/1.1" [07/Jun/2026:02:29:23 +0000] [Client: 104.28.228.58] GET [404] "/blurbs.php" User-Agent: "Go-http-client/1.1" show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-06-07 01:36:14 (1 week ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-06-06 23:54:20 (1 week ago)	shop.levellapromotions.com.au:443 104.28.228.58 - - [07/Jun/2026:09:54:17 +1000] "GET /file.php HTTP ... show more shop.levellapromotions.com.au:443 104.28.228.58 - - [07/Jun/2026:09:54:17 +1000] "GET /file.php HTTP/1.1" 404 209725 "http://shop.levellapromotions.com.au/file.php" "Go-http-client/1.1" ... show less	Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.235

🇺🇸 186.244.214.71

🇮🇳 182.95.182.166

🇮🇳 182.95.123.202

🇧🇷 179.217.195.75

🇷🇺 178.178.194.203

🇻🇳 160.25.81.6

🇨🇳 120.48.147.81

🇺🇸 107.150.97.147

🇨🇳 106.13.181.42

🇺🇬 102.218.89.110

🇮🇪 54.72.207.253

🇩🇪 46.225.192.181

🇺🇸 45.131.195.207

🇮🇳 34.131.119.251

🇺🇸 2607:f8b0:4004:100d::124

🇨🇳 220.181.84.76

🇩🇪 193.124.20.230

🇸🇬 190.92.221.107

🇨🇷 186.26.118.206