104.28.195.127
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇧🇪 Belgium
- City
- Brussels, Brussels Capital
Abuse Reports
Total reports
25 from
23 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Thibault Millant |
104.28.195.127 - - [08/Nov/2026:15:05:22 +0000] "GET /gradio_api/config HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
...
|
Brute-Force Exploited Host SSH | |
| 🇩🇪 EnthecSolutions |
Detected by Enthec Solutions. | Attempts: 252 in 24h | Target port: 5173
|
Port Scan Hacking | |
| 🇺🇸 drewf.ink |
[02:40] Probed unrecognized Docker API path '/gc-service.json'
|
Hacking | |
| 🇬🇧 [email protected] |
Automated report [Server: quest1]: IP caught scanning and attacking Aison Active Defense Honeypot traps.
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 drewf.ink |
[02:25] Attempted HTTPS access to an exposed .env file (/api/.env)
|
Web App Attack | |
| 🇱🇻 radix |
Automated probing for sensitive configuration files and environment leaks.
|
Brute-Force Web App Attack | |
| 🇺🇸 gamabe |
Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.
|
Hacking | |
| 🇩🇪 igerman |
|
Web App Attack | |
| 🇮🇪 [email protected] |
Secrets and credential scanning: 54 probes among 132 requests in 3 minutes, targeting /src/.env, /.aws/credentials, /.git-credentials and /credentials.json. HTTP 400/404 responses; no successful file response.
|
Web App Attack Bad Web Bot | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /docker-compose/.env | seen at 2026-11-07 13:54:40.694 |
|
Web App Attack | |
| 🇺🇸 Keith Beucler |
K5 Services fail2ban jail nginx-k5-web-probes detected high-confidence web abuse. Local web ban applied. Categories: 19,21.
|
Bad Web Bot Web App Attack | |
| 🇩🇪 Klompenzijncool |
Web scanning/probing blocked by Fail2Ban.
|
Port Scan Bad Web Bot | |
| 🇩🇪 EnthecSolutions |
Detected by Enthec Solutions. | Attempts: 154 in 24h | Target port: 11434
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 19 application-level events across 2 target ports and 8 source port(s). Ports: 80/HTTP, 9443/service. Sensors: Tanner, Honeytrap.
|
Port Scan | |
| 🇩🇪 maxpower |
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown