JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.237.79

104.28.237.79 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 99%: ?

99%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.237.79

Whois 104.28.237.79

IP Abuse Reports for 104.28.237.79:

This IP address has been reported a total of 22 times from 19 distinct sources. 104.28.237.79 was first reported on July 7th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 poundawebsiteltd	2026-07-13 17:53:34 (8 hours ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 104.28.237 ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 104.28.237.79 (DE/Germany/-): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 104.28.237.79 (DE/Germany/-): 20 in the last 3600 secs show less	Brute-Force Web App Attack
🇬🇧 masterguru	2026-07-13 17:52:50 (8 hours ago)	COMODO WAF: URL file extension is restricted by policy. Match of "pmFromFile userdata_wl_extensions" ... show more COMODO WAF: URL file extension is restricted by policy. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. (210730-185) show less	Hacking
🇫🇷 Little Iguana	2026-07-12 23:52:16 (1 day ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇩🇪 Holger	2026-07-12 18:16:17 (1 day ago)	WordPress WebAttack	Brute-Force Web App Attack
🇪🇪 maxxsense	2026-07-11 23:38:07 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 104.28.237.79 (US/United States/-)	SQL Injection
🇫🇷 Octopuce	2026-07-10 14:58:02 (3 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /api/.env /backend/.env /config/.env . ... show more Aggressive web search of vulnerable pages: /.env /.env.local /api/.env /backend/.env /config/.env ... show less	Web App Attack
🇩🇪 Nevermind	2026-07-10 10:08:59 (3 days ago)	104.28.237.79 - - [10/Jul/2026:12:08:58 +0200] "GET /.git/config HTTP/1.1" 403 4794 "-" "Mozilla/5.0 ... show more 104.28.237.79 - - [10/Jul/2026:12:08:58 +0200] "GET /.git/config HTTP/1.1" 403 4794 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.28.237.79 - - [10/Jul/2026:12:08:58 +0200] "GET /wp-json HTTP/1.1" 404 4807 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 104.28.237.79 - - [10/Jul/2026:12:08:58 +0200] "GET /.aws/credentials HTTP/1.1" 404 4807 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 104.28.237.79 - - [10/Jul/2026:12:08:59 +0200] "GET /.git/HEAD HTTP/1.1" 403 4794 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-07-10 09:54:23 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇩🇪 NihiliousMonk	2026-07-10 09:30:38 (3 days ago)	Fail2Ban report from jail npm-scanners	Bad Web Bot Web App Attack
🇫🇷 Lacrimosa99	2026-07-09 07:35:42 (4 days ago)	104.28.237.79 - - [09/Jul/2026:09:35:30 +0200] "GET /admin/.env HTTP/2.0" 404 224 "-" "Mozilla/5.0 ( ... show more 104.28.237.79 - - [09/Jul/2026:09:35:30 +0200] "GET /admin/.env HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 104.28.237.79 - - [09/Jul/2026:09:35:31 +0200] "GET /firebase-adminsdk.json HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 104.28.237.79 - - [09/Jul/2026:09:35:41 +0200] "GET /server-status HTTP/2.0" 403 227 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" ... show less	Web Spam
🇨🇭 Origon	2026-07-09 03:43:40 (4 days ago)	http-sensitive-files - IP: 104.28.237.79 - time="2026-07-09T05:43:40+02:00" level=info msg="(555f66 ... show more http-sensitive-files - IP: 104.28.237.79 - time="2026-07-09T05:43:40+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.28.237.79 (US/13335) : 4h ban on Ip 104.28.237.79" module=db show less	Web App Attack
🇩🇪 NihiliousMonk	2026-07-08 21:07:17 (5 days ago)	Fail2Ban report from jail npm-scanners	Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-07-08 20:40:01 (5 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.28.237.79 (US/Un ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.28.237.79 (US/United States/Florida/Miami/-) show less	Bad Web Bot
🇳🇱 wlt-blocker	2026-07-08 20:26:33 (5 days ago)	Unauthorized access to webpage admin	Web App Attack
🇧🇪 cmbplf	2026-07-08 11:34:23 (5 days ago)	129 requests with url.path .env 110 requests with url.path .ssh/*	Brute-Force Bad Web Bot

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.84

🇮🇶 65.20.205.197

🇺🇸 45.33.78.24

🇺🇸 44.192.3.147

🇺🇸 34.205.37.201

🇵🇰 223.123.44.116

🇨🇳 202.102.85.254

🇦🇷 186.122.212.248

🇳🇱 172.217.96.27

🇺🇸 162.217.100.196

🇫🇮 147.185.133.210

🇨🇳 123.207.211.204

🇺🇸 107.150.97.180

🇺🇸 64.62.156.108

🇱🇹 62.60.130.219

🇮🇷 37.148.117.78

🇰🇷 14.52.43.11

🇯🇵 8.216.12.47

🇺🇸 195.184.76.204

🇩🇪 194.88.98.119