104.28.199.134
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇲🇽 Mexico
- City
- Monterrey, Nuevo Leon
Abuse Reports
Total reports
70 from
46 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 paissangroup |
Multiple WAF Violations
|
Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
|
Exploited Host Web App Attack | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇭🇳 unph |
Malicious probe detected: Archivo de configuración JSON expuesto (Method: GET, Probe: /config.json, UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com)
|
Web App Attack Bad Web Bot | |
| Anonymous |
Probing for exposed secret / credential files
|
Hacking Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| Anonymous |
104.28.199.134 - - [12/Nov/2026:19:31:22 +0000] "GET /.env.backup HTTP/1.1" 404 48688 "https://www.owlandbee.com.au/.env.backup" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
...
|
Bad Web Bot Web App Attack | |
| 🇦🇹 SchiWaGoA |
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
|
Web App Attack Bad Web Bot | |
| 🇩🇪 neckaralb-admin.de |
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇧🇷 Halux |
104.28.199.134 Probing protected path or service
|
Web App Attack | |
| Anonymous |
[ns65.kdns.gr] httpd-config-scan: sites=www.rheumatologiko.eu; logs=/var/log/httpd/domains/rheumatologiko.gr.log; samples=/.env.local | /.env.backup | /wp-config.php.bak — shared egress: Cloudflare WARP / iCloud Private Relay
|
Hacking Web App Attack | |
| 🇩🇪 IVski.com |
IVski WAF | Sensitive file probe - looking for exposed wp-config.php
|
Hacking Brute-Force Web App Attack | |
| 🇦🇺 A.i.D.A.N.N |
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
|
Web App Attack | |
| Anonymous |
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇵🇱 Budyn |
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown