JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.222.43

104.28.222.43 was found in our database!

This IP was reported 703 times. Confidence of Abuse is 41%: ?

41%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.222.43

Whois 104.28.222.43

IP Abuse Reports for 104.28.222.43:

This IP address has been reported a total of 703 times from 119 distinct sources. 104.28.222.43 was first reported on April 15th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-07-29 16:19:38 (1 day ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-28 10:19:38 (2 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 JakoBian98	2026-07-24 23:13:47 (5 days ago)	graphiafinans.com: sir/kimlik bilgisi tarama path'i denendi: /secrets.json	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-24 10:27:56 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 104.28.222.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.28.222.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:27:50.914238 2026] [security2:error] [pid 200389:tid 200389] [client 104.28.222.43:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blog.nyemdr.com"] [uri "/.env"] [unique_id "amM-JunvCZPKYDVEFUuUZAAAAA0"], referer: https://www.google.com/search?q=www.blog.nyemdr.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-07-12 05:45:45 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/eksrtadim/ UA: manager(+internet-surf) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 backslash	2026-07-03 02:36:02 (3 weeks ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇫🇷 MatStef132	2026-06-26 12:11:26 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-06-12 22:47:20 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 Baking333	2026-06-09 16:58:53 (1 month ago)	[redacted] 104.28.222.43 - - [09/Jun/2026:17:58:49 +0100] "GET /admin/.env HTTP/1.1" 302 5263 0/3562 ... show more [redacted] 104.28.222.43 - - [09/Jun/2026:17:58:49 +0100] "GET /admin/.env HTTP/1.1" 302 5263 0/35626 "http://[redacted]/admin/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" [redacted] 104.28.222.43 - - [09/Jun/2026:17:58:52 +0100] "GET /app/.env HTTP/1.1" 302 1534 0/39290 "http://[redacted]/app/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-09 14:12:46 (1 month ago)	[redacted] 104.28.222.43 - - [09/Jun/2026:15:12:41 +0100] "GET /admin/.env HTTP/1.1" 302 5313 0/3853 ... show more [redacted] 104.28.222.43 - - [09/Jun/2026:15:12:41 +0100] "GET /admin/.env HTTP/1.1" 302 5313 0/38537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" [redacted] 104.28.222.43 - - [09/Jun/2026:15:12:44 +0100] "GET / HTTP/1.1" 200 13012 0/92909 "https://[redacted]/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-09 03:20:56 (1 month ago)	(mod_security-custom) mod_security (id:210492) triggered by 104.28.222.43 (CA/Canada/Ontario/Toronto ... show more (mod_security-custom) mod_security (id:210492) triggered by 104.28.222.43 (CA/Canada/Ontario/Toronto/-/[AS13335 CLOUDFLARENET]): 1 in the last 3600 secs (0-srv1) show less	Hacking
🇷🇺 Reaper	2026-06-09 02:38:25 (1 month ago)	GET /admin/.env	Web App Attack
🇫🇷 Baking333	2026-06-09 01:08:26 (1 month ago)	[redacted] 104.28.222.43 - - [09/Jun/2026:02:08:24 +0100] "GET /config/.env HTTP/1.1" 302 5253 0/911 ... show more [redacted] 104.28.222.43 - - [09/Jun/2026:02:08:24 +0100] "GET /config/.env HTTP/1.1" 302 5253 0/91138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" [redacted] 104.28.222.43 - - [09/Jun/2026:02:08:24 +0100] "GET / HTTP/1.1" 200 7648 0/161449 "https://[redacted]/config/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-08 19:12:32 (1 month ago)	[redacted] 104.28.222.43 - - [08/Jun/2026:20:12:29 +0100] "GET /backend/.env HTTP/1.1" 302 1564 0/58 ... show more [redacted] 104.28.222.43 - - [08/Jun/2026:20:12:29 +0100] "GET /backend/.env HTTP/1.1" 302 1564 0/584738 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" [redacted] 104.28.222.43 - - [08/Jun/2026:20:12:29 +0100] "GET /.env_secret HTTP/1.1" 302 5293 0/192052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 Major Hostility	2026-06-08 15:42:19 (1 month ago)	"GET /admin/.env HTTP/1.1" 404 "GET /.env.old HTTP/1.1" 404 "GET /.env.backup HTTP/1.1" 404	Web App Attack

Showing 1 to 15 of 703 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:9445:3af::5e:87

🇭🇰 220.246.42.212

🇰🇷 123.58.200.120

🇨🇳 116.179.37.36

🇺🇸 66.132.172.203

🇮🇶 65.20.158.10

🇺🇸 20.106.33.119

🇬🇧 217.154.42.110

🇬🇧 217.146.80.108

🇬🇧 195.96.139.42

🇧🇷 187.34.131.136

🇺🇸 146.190.63.48

🇨🇳 123.52.26.111

🇹🇷 94.154.43.201

🇦🇪 94.57.99.26

🇳🇱 45.148.10.157

🇺🇸 20.65.193.174

🇮🇳 202.9.122.143

🇺🇸 195.184.76.135

🇳🇱 195.178.110.137