104.28.199.135
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇲🇽 Mexico
- City
- Monterrey, Nuevo Leon
Abuse Reports
Total reports
92 from
64 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| Anonymous |
"GET /.git/config HTTP/1.1"
|
Hacking Web App Attack | |
| 🇬🇧 openstrike.co.uk |
5 attacks on PHP URLs, VC URLs, env grabbing URLs:
GET /wp-config.php.bak HTTP/1.1
GET /.git/config HTTP/1.1
GET /.env.sample HTTP/1.1
|
Web App Attack Hacking | |
| 🇨🇿 sweet_acid |
Local web evidence: family=path_probe; path=/.git/HEAD; enforce_count=10; active_ban_hits=0
|
Web App Attack | |
| 🇨🇭 4server |
|
Hacking Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇺🇸 FreeMyIP |
Automated fail2ban report: web application attack / scanning for exploitable paths.
|
Bad Web Bot Web App Attack | |
| 🇩🇪 mravb |
104.28.199.135 - - [14/Nov/2026:22:49:16 +0200] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
...
|
Web App Attack Hacking | |
| 🇧🇷 Halux |
104.28.199.135 Probing protected path or service
|
Web App Attack | |
| 🇷🇴 iulianh |
80,443
|
Brute-Force SSH | |
| 🇺🇸 omc |
AH01630: Client denied by server config.
|
Port Scan | |
| 🇨🇦 Sakusen |
Automated web attack: 5 reqs, 4 paths probed, 3 returned 404; probed: 2 .env, 1 .git, 1 .php
|
Hacking Web App Attack | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
|
Hacking Web App Attack | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| 🇺🇸 abenage |
|
Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown