This IP address has been reported a total of
11
times from
6 distinct
sources.
104.28.20.94 was first reported on
August 7th 2026 , and the most recent report was
1 hour ago Finland
with 5
reports;
Germany
with 2
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Bad Web Bot
10
times;
Web App Attack
2
times;
Hacking
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
BlueWire Hosting
2026-09-29 08:19:46
(1 hour ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇫🇮
as211431.net
2026-09-26 04:39:41
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Python/3.10 aiohttp/3.11.11
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
BlueWire Hosting
2026-09-19 04:24:56
(1 week ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇫🇮
as211431.net
2026-09-12 23:08:48
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Python/3.10 aiohttp/3.11.11
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
cityhunter_rhone
2026-09-11 21:35:02
(2 weeks ago)
Mercurius trap auto report | source=APACHE_DENIED_AGGREGATE | last_seen=2026-09-11 23:31:50 | hits_4 ...
show more
Mercurius trap auto report | source=APACHE_DENIED_AGGREGATE | last_seen=2026-09-11 23:31:50 | hits_403=1 | hits_404=0 | ip=104.28.20.94 | sample_uri=/intro.php
show less
Port Scan
Hacking
Web App Attack
🇵🇱
sefinek.net
2026-09-04 06:16:29
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from UA.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from UA.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Python/3.10 aiohttp/3.11.11 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
as211431.net
2026-08-29 00:26:34
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Python/3.10 aiohttp/3.11.11
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-08-27 03:25:19
(1 month ago)
Automated abuse report (tool_ua). Observed GET / hits=1 at 2026-08-27T03:23:09Z UTC.
Bad Web Bot
Web App Attack
🇺🇸
floreriaexpress
2026-08-26 13:06:10
(1 month ago)
FakeADS-Anti: country:UA | https://floreriaexpresschile.cl/
Bad Web Bot
🇫🇮
as211431.net
2026-08-23 03:45:25
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Python/3.10 aiohttp/3.11.11
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
as211431.net
2026-08-07 00:26:52
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Python/3.10 aiohttp/3.11.11
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Showing 1 to
11
of 11 reports
