104.28.195.126

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
27 reports
24 reporters · latest 1 day ago
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇧🇪 Belgium
City
Brussels, Brussels Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 8 🇫🇷 France 4 🇺🇸 United States of America 4
Most common categories Web App Attack 24 Bad Web Bot 6 Hacking 5 Brute-Force 4 Port Scan 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 solantex
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
Web App Attack
🇩🇪 gadix
[10/Nov/2026:17:48:06.931129 +0100] avNKxpgG0b-nJm1v93UIOgAAAEo 104.28.195.126 34394 127.0.0.1 7081 [10/Nov/2026:17:48:06.965807 +0100] avNKxpgG0b-nJm1v93UIOwAAAEg 104.28.195.126 34408 127.0.0.1 7081 ...
Web App Attack
🇩🇪 Teufel100
ModSecurity rejected a query
Brute-Force Hacking Web App Attack
🇲🇽 octageeks.com
Wordpress malicious attack:[octablocked]
Web App Attack
🇧🇷 Vieira Filho
104.28.195.126 - - [09/Nov/2026:21:51:03 -0300] [35.198.31.82] "35.198.31.82" "GET /scripts/.env HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 0.000 ...
Brute-Force Web App Attack Exploited Host
🇳🇱 Alt255
Bad Web Bot Web App Attack
🇩🇪 XYCoderXY
Web App Attack
🇸🇬 WMK965
Port Scan Web App Attack
🇺🇸 solantex
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
Web App Attack
Anonymous
rule caddy-scan, 3 hits from 2026-11-08T08:15:08Z to 2026-11-08T08:15:08Z
Web App Attack
🇳🇱 myip.foo
[myip.foo] 104.28.195.126 - - [06/Nov/2026:13:57:03 +0000] "GET /.env.sendgrid HTTP/1.1" 404 152 "-" "Mozilla/5.0 (Linux; Android 10; Pixel 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.6219.23 Mobile Safari/537.36"
Bad Web Bot Web App Attack
🇳🇱 Alt255
Bad Web Bot Web App Attack
🇩🇪 NewWavesApp
(mod_security) mod_security triggered on hostname [redacted] 104.28.195.126 (BE/Belgium/-): (CF_ENABLE)
SQL Injection
🇫🇷 eselpcore.com
Requests to non‑existent directory and files (404 scanning)
Web App Attack
🇩🇪 XICTRON
ModSecurity rule violation detected by Fail2Ban
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇱 217.64.98.135
🇫🇷 62.84.182.79
🇨🇳 36.108.171.53
🇩🇪 217.224.52.136
🇦🇷 190.97.120.251
🇺🇿 185.203.239.189
🇺🇸 162.216.149.155
🇸🇬 150.109.16.200
🇳🇱 109.160.32.133
🇳🇱 109.160.32.127
🇳🇱 109.160.32.123
🇩🇪 109.160.32.47
🇷🇴 80.94.95.115
🇭🇰 43.100.90.144
🇩🇪 41.216.189.147
🇺🇦 217.196.163.233
🇬🇧 217.146.80.124
🇷🇴 193.46.255.86
🇬🇧 172.239.127.70
feedback