JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.200.36

104.28.200.36 was found in our database!

This IP was reported 243 times. Confidence of Abuse is 100%: ?

100%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.200.36

Whois 104.28.200.36

IP Abuse Reports for 104.28.200.36:

This IP address has been reported a total of 243 times from 93 distinct sources. 104.28.200.36 was first reported on August 26th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 abuseipdb.amaze321	2026-10-22 03:37:37 (14 hours ago)	Automated reconnaissance: repeated requests for sensitive/non-existent paths.	Web App Attack Bad Web Bot
🇫🇷 abuseipdb.amaze321	2026-10-08 00:36:55 (2 weeks ago)	Automated reconnaissance: repeated requests for sensitive/non-existent paths.	Web App Attack Bad Web Bot
🇺🇸 1cyb3rpunk	2026-10-02 14:09:40 (2 weeks ago)	Coordinated campaign CMP-1786835248-000: 1140 IPs sharing an attack fingerprint (admin_panel_probe, ... show more Coordinated campaign CMP-1786835248-000: 1140 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇦🇺 nzhost.co.nz	2026-10-02 05:36:30 (2 weeks ago)	$f2bV_matches	Hacking Brute-Force
🇵🇱 Budyn	2026-10-02 04:02:34 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.astropot.site \| URI: /.dev.vars \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇳🇱 Alt255	2026-10-02 03:28:26 (2 weeks ago)	[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.200.36 - - [02/Oct/2026:05:28:21 +0200] "GET /.env.backup HTTP/2.0" 301 383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" ... show less	Bad Web Bot Web App Attack
🇺🇸 its101	2026-10-02 03:25:09 (2 weeks ago)	Automated detection by LockdownAccess security system. Attack type(s): config_probe, git_exposure, e ... show more Automated detection by LockdownAccess security system. Attack type(s): config_probe, git_exposure, env_grab. Reason: Nginx: git_exposure attack. Path targeted: unknown. Blocked in Cloudflare. show less	Web App Attack
🇺🇸 Major Hostility	2026-10-02 01:15:27 (2 weeks ago)	"GET /.git/config HTTP/1.1" 404 "GET /.env HTTP/1.1" 404 "GET /.env.production HTTP/1.1" 404 "GET /. ... show more "GET /.git/config HTTP/1.1" 404 "GET /.env HTTP/1.1" 404 "GET /.env.production HTTP/1.1" 404 "GET /.env.backup HTTP/1.1" 404 show less	Web App Attack
🇫🇷 ELYAZ	2026-10-02 00:59:52 (2 weeks ago)	(y3) Failed access -byebye- from 104.28.200.36 (IE/Ireland/-): (CF_ENABLE)	Hacking
Anonymous	2026-10-02 00:34:16 (2 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇩🇪 itsolon	2026-10-01 23:30:48 (2 weeks ago)	[02/Oct/2026:01:30:47 +0200] 179089744737.012278 104.28.200.36 0 217.154.7.177 443 [02/Oct/2026:01:3 ... show more [02/Oct/2026:01:30:47 +0200] 179089744737.012278 104.28.200.36 0 217.154.7.177 443 [02/Oct/2026:01:30:47 +0200] 179089744756.850470 104.28.200.36 0 217.154.7.177 443 [02/Oct/2026:01:30:47 +0200] 179089744780.203243 104.28.200.36 0 217.154.7.177 443 [02/Oct/2026:01:30:47 +0200] 179089744730.684095 104.28.200.36 0 217.154.7.177 443 [02/Oct/2026:01:30:47 +0200] 179089744757.001420 104.28.200.36 0 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇧🇷 radardatelecom	2026-10-01 22:26:03 (2 weeks ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
Anonymous	2026-10-01 22:03:12 (2 weeks ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇫🇮 as211431.net	2026-10-01 21:56:17 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from IE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from IE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /pricing UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-10-01 21:39:22 (2 weeks ago)	Web App Attack	Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 243 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.113

🇺🇸 147.185.132.133

🇺🇸 138.68.3.114

🇮🇳 117.242.121.25

🇨🇳 116.147.148.233

🇮🇳 103.217.85.79

🇸🇮 102.220.160.42

🇳🇱 45.148.10.152

🇧🇪 34.140.31.161

🇯🇵 34.84.225.41

🇻🇳 210.245.20.230

🇦🇷 200.81.166.150

🇺🇸 185.180.141.110

🇳🇱 185.136.15.111

🇺🇸 172.40.3.94

🇷🇺 95.181.25.212

🇳🇱 77.91.71.25

🇳🇱 45.148.10.183

🇻🇳 42.114.230.33

🇩🇿 41.111.227.10