JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.251.145

104.28.251.145 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 3%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.251.145

Whois 104.28.251.145

IP Abuse Reports for 104.28.251.145:

This IP address has been reported a total of 24 times from 12 distinct sources. 104.28.251.145 was first reported on November 21st 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 matthieul.dev	2026-06-19 03:45:14 (1 week ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=42741	Port Scan Brute-Force
Anonymous	2024-12-11 05:08:15 (1 year ago)	Trawling for Open Source CMS installs	Hacking Brute-Force
Anonymous	2024-12-11 03:56:43 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇻🇳 Xuan Can	2024-01-04 04:35:39 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.251.145 (NL/The Netherlands/-): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 104.28.251.145 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 04 11:35:34.217266 2024] [security2:error] [pid 30699:tid 47877666817792] [client 104.28.251.145:50823] [client 104.28.251.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "server1.pavietnam.com"] [uri "/.env"] [unique_id "ZZY1loAEvAHqwsoDAJjZEAAAAAM"] show less	Brute-Force SSH
🇺🇸 mnsf	2023-12-29 05:01:43 (2 years ago)	Too many Status 40X (50) Scanning/Probing (16) Request Overload (147)	Brute-Force Web App Attack
🇳🇱 BlueWire Hosting	2023-12-20 15:10:04 (2 years ago)	Scanning for Laravel vulnerabilities	Web App Attack
🇩🇪 Mr-Money	2023-12-18 19:55:36 (2 years ago)	104.28.251.145 - - [18/Dec/2023:20:55:35 +0100] "GET /.env HTTP/1.1" 404 522 "-" "Mozilla/5.0 (Macin ... show more 104.28.251.145 - - [18/Dec/2023:20:55:35 +0100] "GET /.env HTTP/1.1" 404 522 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2023-12-18 09:16:40 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 18 04:16:32.633975 2023] [security2:error] [pid 32199] [client 104.28.251.145:41529] [client 104.28.251.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundaciondamashcc.org.ec"] [uri "/.env"] [unique_id "ZYAN8AFR-2kGbltb80wyiwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-11 20:36:03 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 15:35:55.642845 2023] [security2:error] [pid 21609] [client 104.28.251.145:52020] [client 104.28.251.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.195"] [uri "/.env"] [unique_id "ZXdyq1mZpGwrs01wSl7_FAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇻🇳 Xuan Can	2023-12-11 20:10:42 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.251.145 (NL/The Netherlands/-): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 104.28.251.145 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 12 03:10:38.237841 2023] [security2:error] [pid 24999:tid 47660309022464] [client 104.28.251.145:64274] [client 104.28.251.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "112.213.89.138"] [uri "/.env"] [unique_id "ZXdsvttwgTCSRqHJyuPOFQAAAcs"] show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2023-12-11 20:08:37 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 15:08:32.990245 2023] [security2:error] [pid 4380] [client 104.28.251.145:51658] [client 104.28.251.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.99"] [uri "/.env"] [unique_id "ZXdsQLVSwoSyrH7JT2nobgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-11 19:50:40 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 14:50:35.312418 2023] [security2:error] [pid 10099:tid 47465713661696] [client 104.28.251.145:49403] [client 104.28.251.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.23"] [uri "/.env"] [unique_id "ZXdoC8HzkIitBtuZVP7eiQAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-11 19:30:08 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 14:30:00.734553 2023] [security2:error] [pid 19381:tid 46998255445760] [client 104.28.251.145:16159] [client 104.28.251.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.83"] [uri "/.env"] [unique_id "ZXdjONp0uHMw8gT4gtHwxQAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-11 19:14:32 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 14:14:25.588449 2023] [security2:error] [pid 733609] [client 104.28.251.145:36745] [client 104.28.251.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.7"] [uri "/.env"] [unique_id "ZXdfkXTs6Bd15rOhORiffwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-11 18:32:38 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.28.251.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 13:32:32.992610 2023] [security2:error] [pid 11648] [client 104.28.251.145:38168] [client 104.28.251.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.213"] [uri "/.env"] [unique_id "ZXdVwEC6Wifi3k_LV17JdQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 24.144.83.228

🇧🇪 198.235.24.211

🇺🇸 194.187.179.137

🇺🇸 192.249.127.213

🇵🇦 190.218.240.232

🇨🇳 182.44.39.49

🇺🇸 162.216.150.4

🇨🇳 121.227.152.250

🇨🇳 119.48.134.216

🇺🇸 71.27.86.44

🇺🇸 66.132.172.186

🇩🇪 46.249.98.62

🇬🇧 35.203.210.225

🇺🇸 20.84.119.5

🇺🇸 205.210.31.109

🇳🇱 195.178.110.30

🇺🇸 174.35.25.179

🇳🇱 91.92.42.170

🇳🇱 91.92.40.231

🇫🇷 85.217.140.49