JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.28.152.246

Neutral Activity

Abuse Confidence Score

0% Low Risk

142 reports

99 reporters · latest 3 months ago

ISP: Cloudflare, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS13335
Domain Name: cloudflare.com
Country: 🇺🇸 United States of America
City: Lansing, Kansas

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.28.152.246 has been reported 142 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

142 from 99 distinct reporters

First reported

January 28th 2023

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 Lacika555	2025-08-14 09:55:53 UTC · (1 year ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
Anonymous	2025-08-12 10:19:25 UTC · (1 year ago)	2025-08-12T13:19:25.358512+03:00 mail haproxy[1481]: 104.28.152.246:38757 [12/Aug/2025:13:19:25.358] http-in http-in/<NOSRV> 0/-1/-1/-1/0 301 100 - - LR-- 1/1/0/0/0 0/0 "GET /wp-login.php HTTP/1.1" ...	Brute-Force Web App Attack
🇬🇧 SilverZippo	2025-08-12 10:09:08 UTC · (1 year ago)	Web App Attack	Web App Attack
🇨🇭 backslash	2025-08-10 18:30:08 UTC · (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇹🇭 thaizone.com	2025-08-05 12:32:56 UTC · (1 year ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
🇧🇷 hostseries	2025-08-02 16:27:40 UTC · (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
🇸🇪 peterh	2025-08-02 04:25:00 UTC · (1 year ago)	Aug 2 04:02:29 n sm-mta[29756]: 57222Nk3029756: [104.28.152.246] did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA	Email Spam Hacking
🇹🇭 thaizone.com	2025-08-01 23:03:50 UTC · (1 year ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
🇹🇷 rtbh.com.tr	2025-05-15 20:08:10 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-05-14 20:08:08 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇴 atluxity	2025-05-14 09:38:11 UTC · (1 year ago)	May 14 09:32:02 host1 sshd[27998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.152.246 May 14 09:32:03 host1 sshd[27998]: Failed password for invalid user mysql from 104.28.152.246 port 63078 ssh2 Ma ... show more May 14 09:32:02 host1 sshd[27998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.152.246 May 14 09:32:03 host1 sshd[27998]: Failed password for invalid user mysql from 104.28.152.246 port 63078 ssh2 May 14 09:38:11 host1 sshd[30856]: Failed password for root from 104.28.152.246 port 63482 ssh2 ... show less	Brute-Force SSH
🇫🇷 NPatouillard	2025-05-14 09:10:06 UTC · (1 year ago)	May 14 10:49:11 git sshd[2980068]: Invalid user gerencia from 104.28.152.246 port 65235 May 14 10:56:05 git sshd[2980106]: Invalid user olb from 104.28.152.246 port 65301 May 14 11:10:06 git sshd[2980172]: Invalid user vscode from 104.28.152.246 port ... show more May 14 10:49:11 git sshd[2980068]: Invalid user gerencia from 104.28.152.246 port 65235 May 14 10:56:05 git sshd[2980106]: Invalid user olb from 104.28.152.246 port 65301 May 14 11:10:06 git sshd[2980172]: Invalid user vscode from 104.28.152.246 port 65282 ... show less	Brute-Force SSH
🇩🇪 blackpanther	2025-05-14 08:52:01 UTC · (1 year ago)	2025-05-14T10:48:30.239932+02:00 sshd[3046490]: Invalid user gerencia from 104.28.152.246 port 64131 2025-05-14T10:48:30.363486+02:00 sshd[3046490]: Disconnected from invalid user gerencia 104.28.152.246 port 64131 [preauth] 2025-05-14T10:52:00.280 ... show more 2025-05-14T10:48:30.239932+02:00 sshd[3046490]: Invalid user gerencia from 104.28.152.246 port 64131 2025-05-14T10:48:30.363486+02:00 sshd[3046490]: Disconnected from invalid user gerencia 104.28.152.246 port 64131 [preauth] 2025-05-14T10:52:00.280812+02:00 sshd[3093397]: Disconnected from authenticating user root 104.28.152.246 port 64413 [preauth] show less	Brute-Force SSH
Anonymous	2025-05-14 07:56:55 UTC · (1 year ago)	SSH BruteForce attack	SSH
🇨🇦 James Calum	2025-05-14 07:27:51 UTC · (1 year ago)	May 14 07:27:48 Sildom2 sshd[1392139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.152.246 May 14 07:27:50 Sildom2 sshd[1392139]: Failed password for invalid user dev from 104.28.152.246 port 64877 ... show more May 14 07:27:48 Sildom2 sshd[1392139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.152.246 May 14 07:27:50 Sildom2 sshd[1392139]: Failed password for invalid user dev from 104.28.152.246 port 64877 ssh2 ... show less	Brute-Force SSH

Showing 31 to 45 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2602:80d:1007::cc

🇺🇸 191.102.174.113

🇵🇦 190.140.114.149

🇵🇱 172.64.200.81

🇬🇧 118.193.64.235

🇪🇨 45.228.52.109

🇺🇸 45.79.191.178

🇺🇸 191.101.241.242

🇧🇷 179.125.241.251

🇺🇸 172.66.45.29

🇸🇦 144.24.209.174

🇺🇸 138.68.245.142

🇰🇷 121.133.167.123

🇫🇷 104.165.131.61

🇧🇩 103.159.2.113

🇺🇸 74.220.143.130

🇸🇬 47.128.124.64

🇷🇺 31.173.85.47

🇺🇸 2400:cb00:11:1000:780a:f7fc:ca12:7689

🇭🇰 219.79.17.110