JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.240.189

104.28.240.189

Recent Activity

608 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Cloudflare, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS13335

Domain Name

cloudflare.com

Country

🇺🇸 United States of America

City

Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.28.240.189:

This IP address has been reported a total of 608 times from 274 distinct sources. 104.28.240.189 was first reported on July 25th 2026, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: Germany with 149 reports; United States of America with 117 reports; France with 59 reports. The most common categories in these recent reports were: Web App Attack 473 times; Bad Web Bot 180 times; Brute-Force 141 times; Hacking 121 times; Port Scan 57 times; Other 60 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-09-03 16:01:39 (3 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
Anonymous	2026-09-03 02:00:16 (4 days ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇺🇸 mw	2026-09-03 00:00:39 (4 days ago)	GET /.env HTTP/1.1	Web App Attack
🇩🇪 ghostwarriors	2026-09-02 17:51:24 (4 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-09-02 07:42:25 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇵🇱 Budyn	2026-09-02 06:05:28 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.dont-eat-the-pudding.xyz \| URI: /.vscode/settings.json \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 MSC IT for Business GmbH	2026-09-02 05:45:05 (5 days ago)	GASTO/CrowdSec: gasto/modsec-critical triggered (via crowdsec-agent, categories 15,21)	Hacking Web App Attack
🇨🇭 dalslab ltd	2026-09-02 05:43:22 (5 days ago)	[02/Sep/2026:07:43:06 +0200] - 404 404 - GET https pdf.dalslab.com "/_rNd9xZ7kL3" [Client 104.28.240 ... show more [02/Sep/2026:07:43:06 +0200] - 404 404 - GET https pdf.dalslab.com "/_rNd9xZ7kL3" [Client 104.28.240.189] [Length 2926] [Gzip -] [Sent-to 10.1.1.231] "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36" "https://www.google.com/search?q=pdf.dalslab.com" [02/Sep/2026:07:43:15 +0200] - 404 404 - GET https pdf.dalslab.com "/sitemap_index.xml" [Client 104.28.240.189] [Length 2926] [Gzip -] [Sent-to 10.1.1.231] "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" "-" [02/Sep/2026:07:43:17 +0200] - 404 404 - GET https pdf.dalslab.com "/sitemap-index.xml" [Client 104.28.240.189] [Length 2926] [Gzip -] [Sent-to 10.1.1.231] "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" "https://www.google.com/search?q=pdf.dalslab.com" [02/Sep/2026:07:43:21 +0200] - 404 404 - HEAD https pdf.dalslab.com "/.env" [Client 104.28.240.189] [Length 0 ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇩🇪 lespbaj	2026-09-02 05:35:58 (5 days ago)	{"time":"2026-09-02T05:35:56+00:00","ip":"104.28.240.189","method":"HEAD","uri":"/.env.production"," ... show more {"time":"2026-09-02T05:35:56+00:00","ip":"104.28.240.189","method":"HEAD","uri":"/.env.production","ua":"","referer":""} ... show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-02 05:23:02 (5 days ago)	[02/Sep/2026:08:23:02 +0300] -- 104.28.240.189 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.en ... show more [02/Sep/2026:08:23:02 +0300] -- 104.28.240.189 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env.sample HTTP/1.1 show less	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-02 02:55:58 (5 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 enjoyably	2026-09-01 22:16:14 (5 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇧🇷 Halux	2026-09-01 20:37:27 (5 days ago)	104.28.240.189 Probing protected path or service	Web App Attack
🇵🇱 Budyn	2026-09-01 20:34:55 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.budyn.top \| URI: /.env \| UA: Unknown User-Agent \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-09-01 18:27:03 (5 days ago)	Web probing (4 hits in 24h) on kunstkringhenrijonas.nl: sensitive-path scans and/or 404 bursts. Repo ... show more Web probing (4 hits in 24h) on kunstkringhenrijonas.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON. show less	Web App Attack

Showing 1 to 15 of 608 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 186.72.246.135

🇪🇨 170.254.28.244

🇧🇩 123.200.9.4

🇺🇸 34.58.102.173

🇰🇷 1.214.214.114

🇰🇷 220.90.220.204

🇩🇪 213.95.142.212

🇲🇿 197.219.228.250

🇵🇱 193.93.68.47

🇧🇷 187.50.194.182

🇺🇸 172.253.214.25

🇺🇸 157.230.180.149

🇨🇲 154.72.189.182

🇮🇳 135.235.53.3

🇵🇭 122.53.126.18

🇮🇳 103.87.56.11

🇮🇩 103.59.160.242

🇮🇩 103.40.120.158

🇳🇬 102.91.73.102

🇵🇱 81.163.8.156