JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.235.246

104.28.235.246 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Boston, Massachusetts

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.235.246

Whois 104.28.235.246

IP Abuse Reports for 104.28.235.246:

This IP address has been reported a total of 37 times from 16 distinct sources. 104.28.235.246 was first reported on November 26th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ecowan.fr	2025-07-24 02:09:09 (1 year ago)	104.28.235.246&categories=<categories>&comment=Fail2ban: portscan ban - IP 104.28.235.246 detected w ... show more 104.28.235.246&categories=<categories>&comment=Fail2ban: portscan ban - IP 104.28.235.246 detected with 2 attempts show less	Port Scan
🇺🇸 LockBlock	2025-05-10 22:21:36 (1 year ago)	2025-05-10 22:21:36: Minecraft server scan detected from 104.28.235.246 on port 25565 of racknerd-e7 ... show more 2025-05-10 22:21:36: Minecraft server scan detected from 104.28.235.246 on port 25565 of racknerd-e7e1a9 show less	Port Scan
🇺🇸 cpxducky	2025-05-08 23:53:38 (1 year ago)	2025-05-08 23:53:38: Minecraft server scan detected from 104.28.235.246 on port 25565 of ubuntu-4gb- ... show more 2025-05-08 23:53:38: Minecraft server scan detected from 104.28.235.246 on port 25565 of ubuntu-4gb-ash-1 show less	Port Scan
Anonymous	2024-07-30 03:47:13 (2 years ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-06-09 00:40:59 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 Villanelle	2024-03-06 07:05:00 (2 years ago)	Probing for credentials: GET /.git/config HTTP/1.1 - python-requests/2.31.0	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-03-01 03:06:23 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 29 22:06:20.676984 2024] [security2:error] [pid 5535] [client 104.28.235.246:58240] [client 104.28.235.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilikesounds.com"] [uri "/.git/config"] [unique_id "ZeFGLNKTfMGefPCtYAsStwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-29 16:06:07 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 29 11:06:02.843143 2024] [security2:error] [pid 16468] [client 104.28.235.246:27589] [client 104.28.235.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackjobsnetwork.com"] [uri "/.git/config"] [unique_id "ZeCrahbraY5cz3mdy7IduQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 John Hencke	2024-02-29 00:00:00 (2 years ago)	Brute Force Attack on Citrix Netscaler. Attempts: 3	Brute-Force
🇺🇸 TPI-Abuse	2024-02-27 19:18:46 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 14:18:43.179217 2024] [security2:error] [pid 4680] [client 104.28.235.246:19083] [client 104.28.235.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inspiredsidekick.com"] [uri "/.git/config"] [unique_id "Zd41k9WD0r1Rw3b13vtNaAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 GabrielJST	2024-02-26 18:26:55 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.28.235.246 (US/U ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.28.235.246 (US/United States/-) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-02-25 15:09:55 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 25 10:09:51.412070 2024] [security2:error] [pid 13883] [client 104.28.235.246:16165] [client 104.28.235.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aefynr.com"] [uri "/.git/config"] [unique_id "ZdtYPzO9Ty21dJxa1UFo_QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-25 10:18:14 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 25 05:18:07.505989 2024] [security2:error] [pid 31113] [client 104.28.235.246:36877] [client 104.28.235.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beetreelabs.com"] [uri "/.git/config"] [unique_id "ZdsT35oQ_iWLnyihneOrigAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-22 22:27:24 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 22 17:27:20.296454 2024] [security2:error] [pid 29680] [client 104.28.235.246:17907] [client 104.28.235.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "napaautopartskeokuk.com"] [uri "/.git/config"] [unique_id "ZdfKSI5vISm7GGRy6OE2UwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-22 21:02:19 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.235.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 22 16:02:14.077572 2024] [security2:error] [pid 11012] [client 104.28.235.246:49950] [client 104.28.235.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teatrosohoclub.com"] [uri "/.git/config"] [unique_id "Zde2Vvv_F605zFHI9WXP0gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.52

🇺🇸 152.32.151.121

🇵🇹 94.132.0.254

🇺🇸 67.217.59.88

🇯🇵 8.216.12.173

🇫🇷 213.32.77.104

🇵🇾 181.94.210.127

🇧🇷 177.11.196.84

🇩🇪 151.243.11.13

🇲🇾 103.171.42.213

🇦🇷 45.228.59.182

🇳🇱 45.148.10.157

🇳🇱 2001:67c:e60:c0c:192:42:116:48

🇧🇴 200.58.83.79

🇳🇱 193.47.62.69

🇰🇷 182.31.212.167

🇪🇸 85.87.122.21

🇩🇪 57.129.127.134

🇺🇸 45.79.128.205

🇩🇪 43.157.67.70