JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.246.229

104.28.246.229 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 75%: ?

75%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇷🇺 Russian Federation
City	Chelyabinsk, Chelyabinsk

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.246.229

Whois 104.28.246.229

IP Abuse Reports for 104.28.246.229:

This IP address has been reported a total of 136 times from 44 distinct sources. 104.28.246.229 was first reported on May 1st 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-06-15 19:40:30 (2 days ago)	(wordpress) Failed wordpress login from 104.28.246.229 (RU/Russia/Chelyabinsk Oblast/Chelyabinsk/-)	Brute-Force
🇦🇺 FireGuard Server	2026-06-15 15:15:08 (2 days ago)	Blocked by OPNsense firewall; 8 hits, proto=tcp, ports=443	Port Scan Hacking
🇨🇳 pengpeng	2026-06-06 14:36:39 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 56266 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 56266 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-06-05 14:08:40 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 56266 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 56266 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 masterguru	2026-06-05 11:54:23 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇫🇷 bazter.pro	2026-06-05 06:45:29 (1 week ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-06-04 22:25:37 (1 week ago)		Brute-Force Web App Attack
Anonymous	2026-06-04 21:03:55 (1 week ago)	Fail2ban filtered ...	Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 07:16:10 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 104.28.246.229 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 104.28.246.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 03:16:03.690730 2026] [security2:error] [pid 32707:tid 32707] [client 104.28.246.229:24531] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.28.246.229 (+1 hits since last alert)\|therealseska.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "therealseska.com"] [uri "/xmlrpc.php"] [unique_id "aiEmM9Pl6zKbOGvlhlFjOwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-03 01:03:04 (2 weeks ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
Anonymous	2026-06-02 16:52:28 (2 weeks ago)	[ssd5.kdns.gr] httpd-xmlrpc-post: sites=weihnachtsbasar-athen.gr; logs=/var/log/httpd/domains/weihna ... show more [ssd5.kdns.gr] httpd-xmlrpc-post: sites=weihnachtsbasar-athen.gr; logs=/var/log/httpd/domains/weihnachtsbasar-athen.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇩🇪 grassau.com	2026-06-02 13:48:21 (2 weeks ago)	(wordpress) Failed wordpress login from 104.28.246.229 (RU/Russia/Chelyabinsk Oblast/Chelyabinsk/-)	Brute-Force
🇦🇺 screwlooseit.com.au	2026-06-01 16:11:24 (2 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/-	Web App Attack
🇱🇻 garmtech.com	2026-06-01 14:39:31 (2 weeks ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
Anonymous	2026-05-31 12:56:01 (2 weeks ago)	[redacted] 104.28.246.229 - - [31/May/2026:14:54:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 104.28.246.229 - - [31/May/2026:14:54:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 104.28.246.229 - - [31/May/2026:14:55:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site45523804.com" [redacted] 104.28.246.229 - - [31/May/2026:14:55:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" [redacted] 104.28.246.229 - - [31/May/2026:14:55:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 104.28.246.229 - - [31/May/2026:14:55:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" ... show less	Hacking Web App Attack

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 150.107.38.21

🇬🇧 107.181.154.136

🇺🇸 64.62.156.216

🇸🇬 43.134.27.142

🇷🇺 213.180.203.128

🇰🇿 193.31.200.85

🇨🇦 173.34.148.189

🇨🇱 104.239.44.214

🇳🇱 91.92.40.8

🇩🇪 85.214.180.225

🇷🇴 80.94.92.168

🇳🇱 77.91.71.12

🇰🇷 59.21.37.60

🇨🇳 14.29.201.23

🇨🇦 4.204.204.10

🇧🇷 191.183.136.228

🇮🇹 185.15.170.244

🇫🇷 176.183.121.46

🇵🇭 154.18.197.35

🇻🇳 125.235.229.205