JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.246.116

104.28.246.116 was found in our database!

This IP was reported 836 times. Confidence of Abuse is 100%: ?

100%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	St. Louis, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.246.116

Whois 104.28.246.116

IP Abuse Reports for 104.28.246.116:

This IP address has been reported a total of 836 times from 300 distinct sources. 104.28.246.116 was first reported on December 9th 2023, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-07-06 01:12:14 (16 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇳🇱 Brict IT	2026-07-05 22:16:17 (19 hours ago)		Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-07-05 19:57:30 (22 hours ago)	2026-07-05 @ 21:57:30 (CET) ~ Blocked for trying to access: /chosen.php?p=	Web App Attack
🇫🇷 Hippoline	2026-07-05 18:39:12 (23 hours ago)	[Sun Jul 05 20:39:10.646796 2026] [authz_core:error] [pid 31563] [client 104.28.246.116:17356] AH016 ... show more [Sun Jul 05 20:39:10.646796 2026] [authz_core:error] [pid 31563] [client 104.28.246.116:17356] AH01630: client denied by server configuration: /var/www/championnat.lu/web/ms-themes.php, referer: http://championnat.lu/ms-themes.php [Sun Jul 05 20:39:11.003658 2026] [authz_core:error] [pid 31563] [client 104.28.246.116:17356] AH01630: client denied by server configuration: /var/www/championnat.lu/web/chosen.php, referer: http://championnat.lu/chosen.php?p= [Sun Jul 05 20:39:11.352295 2026] [authz_core:error] [pid 31563] [client 104.28.246.116:17356] AH01630: client denied by server configuration: /var/www/championnat.lu/web/file.php, referer: http://championnat.lu/file.php [Sun Jul 05 20:39:11.730530 2026] [authz_core:error] [pid 31563] [client 104.28.246.116:17356] AH01630: client denied by server configuration: /var/www/championnat.lu/web/flower.php, referer: http://championnat.lu/flower.php [Sun Jul 05 20:39:12.073218 2026] [authz_core:error] [pid 31563] [client 104.28.246.116:17356] ... show less	Brute-Force Web App Attack
🇧🇾 lns.bz	2026-07-05 16:40:07 (1 day ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 infra-monitor	2026-07-05 15:00:07 (1 day ago)	Automated ban via infra-monitor: webshell-high-confidence, webshell-probe	Port Scan Hacking Web App Attack
Anonymous	2026-07-03 11:09:09 (3 days ago)	"GET /wp-admin/admin-ajax.php HTTP/1.1"	Hacking Web App Attack
🇬🇧 venus.launch.bz	2026-07-03 06:53:59 (3 days ago)	(gohttpua) Bad UA Go-http-client from 104.28.246.116 (US/United States/-)	Hacking
🇩🇪 gamingkante.xyz	2026-06-28 20:00:26 (1 week ago)	[Sun Jun 28 22:00:25.069451 2026] [php:error] [pid 3851014:tid 3851014] [client 104.28.246.116:55964 ... show more [Sun Jun 28 22:00:25.069451 2026] [php:error] [pid 3851014:tid 3851014] [client 104.28.246.116:55964] script '/var/www/html/web/ms-themes.php' not found or unable to stat [Sun Jun 28 22:00:25.300218 2026] [php:error] [pid 3851014:tid 3851014] [client 104.28.246.116:55964] script '/var/www/html/web/chosen.php' not found or unable to stat [Sun Jun 28 22:00:25.548644 2026] [php:error] [pid 3851014:tid 3851014] [client 104.28.246.116:55964] script '/var/www/html/web/file.php' not found or unable to stat [Sun Jun 28 22:00:25.832839 2026] [php:error] [pid 3851014:tid 3851014] [client 104.28.246.116:55964] script '/var/www/html/web/flower.php' not found or unable to stat [Sun Jun 28 22:00:26.014364 2026] [php:error] [pid 3851014:tid 3851014] [client 104.28.246.116:55964] script '/var/www/html/web/gifclass.php' not found or unable to stat [Sun Jun 28 22:00:26.224214 2026] [php:error] [pid 3851014:tid 3851014] [client 104.28.246.116:55964] script '/var/www/html/web/bless.php' not found or unabl ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-28 19:08:38 (1 week ago)	104.28.246.116 - - [28/Jun/2026:22:08:37 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 709 "-" ... show more 104.28.246.116 - - [28/Jun/2026:22:08:37 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 709 "-" "Go-http-client/1.1" 104.28.246.116 - - [28/Jun/2026:22:08:37 +0300] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 404 709 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇳🇱 Site.eu	2026-06-28 16:20:55 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 pearbright	2026-06-28 14:23:49 (1 week ago)	[Sun Jun 28 14:23:48.846283 2026] [php:error] [pid 770496:tid 770496] [client 104.28.246.116:48037] ... show more [Sun Jun 28 14:23:48.846283 2026] [php:error] [pid 770496:tid 770496] [client 104.28.246.116:48037] script '/var/www/arco/html/ms-themes.php' not found or unable to stat, referer: http://arco.free-software.org.uk/ms-themes.php [Sun Jun 28 14:23:49.173934 2026] [php:error] [pid 770496:tid 770496] [client 104.28.246.116:48037] script '/var/www/arco/html/chosen.php' not found or unable to stat, referer: http://arco.free-software.org.uk/chosen.php?p= ... show less	Web App Attack
🇫🇷 Octopuce	2026-06-26 09:05:59 (1 week ago)	Aggressive web search of vulnerable pages: /ms-themes.php /chosen.php /file.php /flower.php /gifclas ... show more Aggressive web search of vulnerable pages: /ms-themes.php /chosen.php /file.php /flower.php /gifclass.php /bless.php /class-t.api.php /blurbs.p ... show less	Web App Attack
🇧🇪 cmbplf	2026-06-26 03:02:07 (1 week ago)	2.587 requests from abuseipdb.com blacklisted IP (1yr7mos2w)	Brute-Force Bad Web Bot
🇷🇺 DZBOT	2026-06-24 09:31:56 (1 week ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 836 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.127.62.94

🇷🇺 95.24.34.245

🇺🇸 35.185.113.213

🇰🇷 20.214.163.77

🇷🇴 2.57.121.25

🇺🇸 216.73.216.215

🇺🇸 209.126.82.4

🇲🇽 187.191.48.4

🇬🇧 185.216.145.179

🇺🇸 172.245.21.30

🇹🇼 165.154.227.158

🇰🇭 36.37.203.28

🇺🇸 2620:18c:0:192::e0:208

🇳🇱 193.176.31.233

🇺🇸 172.253.210.91

🇹🇼 150.117.151.188

🇺🇸 107.172.80.207

🇹🇷 94.154.43.181

🇷🇴 92.118.39.50

🇦🇹 68.210.200.55