JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.230.242

104.28.230.242 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 47%: ?

47%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.230.242

Whois 104.28.230.242

IP Abuse Reports for 104.28.230.242:

This IP address has been reported a total of 57 times from 37 distinct sources. 104.28.230.242 was first reported on April 2nd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 KnightIndustries	2026-07-18 14:06:13 (1 day ago)	2026-07-18T16:05:36.836828+02:00 milkyway wordpress(oldscarborough.com)[3914549]: XML-RPC authentica ... show more 2026-07-18T16:05:36.836828+02:00 milkyway wordpress(oldscarborough.com)[3914549]: XML-RPC authentication failure for joshua from 104.28.230.242 2026-07-18T16:05:59.969767+02:00 milkyway wordpress(oldscarborough.com)[3909166]: XML-RPC authentication failure for joshua from 104.28.230.242 2026-07-18T16:06:11.472483+02:00 milkyway wordpress(oldscarborough.com)[3914546]: XML-RPC authentication failure for joshua from 104.28.230.242 ... show less	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-07-18 13:08:11 (1 day ago)	104.28.230.242 - - [18/Jul/2026:09:06:46 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress. ... show more 104.28.230.242 - - [18/Jul/2026:09:06:46 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" 104.28.230.242 - - [18/Jul/2026:09:06:57 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" 104.28.230.242 - - [18/Jul/2026:09:07:07 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" 104.28.230.242 - - [18/Jul/2026:09:07:18 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" 104.28.230.242 - - [18/Jul/2026:09:08:11 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 12:36:48 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 104.28.230.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 104.28.230.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 08:36:43.116722 2026] [security2:error] [pid 693111:tid 693111] [client 104.28.230.242:54649] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.28.230.242 (+1 hits since last alert)\|travelwithjenniferb.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "travelwithjenniferb.com"] [uri "/xmlrpc.php"] [unique_id "altzWxSvyUmeMQaaKpsgVQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-09 17:48:28 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-07 12:23:14 (1 week ago)	Attac	Brute-Force
🇨🇳 pengpeng	2026-07-02 17:21:55 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 22493 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 22493 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 backslash	2026-06-15 18:18:00 (1 month ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇺🇸 xmission.com	2026-06-11 04:06:59 (1 month ago)	Blocked by UFW (TCP on 60073) Source port: 50532 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 60073) Source port: 50532 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 104.28.230.242) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 demonsword	2026-06-10 08:03:23 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: i.bimbolive.com:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-06-06 12:56:11 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: i.bimbolive.com:443 show less	Open Proxy Port Scan
🇷🇺 punctualsuspension968	2026-06-05 18:05:13 (1 month ago)	blocked by ufw on TCP 11834	Port Scan
🇯🇵 demonsword	2026-06-02 10:40:16 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: i.bimbolive.com:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-05-30 09:03:24 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: i.bimbolive.com:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-05-28 07:56:08 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: i.bimbolive.com:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-05-27 03:55:12 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: i.bimbolive.com:443 show less	Open Proxy Port Scan

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.238.205.113

🇮🇳 206.189.134.210

🇺🇸 194.195.208.25

🇨🇳 117.72.186.146

🇳🇱 45.148.10.151

🇳🇱 45.148.10.147

🇸🇬 43.173.167.75

🇷🇴 2.57.121.112

🇺🇸 2607:ff10:c8:594::8

🇨🇳 183.250.89.44

🇮🇩 163.7.9.84

🇺🇸 143.198.6.225

🇸🇬 103.187.146.253

🇯🇵 92.113.142.203

🇫🇷 85.217.140.22

🇱🇹 62.60.130.219

🇨🇦 23.159.16.107

🇹🇳 196.203.231.220

🇺🇸 172.253.7.16

🇩🇪 164.92.240.151