JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.158.252

104.28.158.252 was found in our database!

This IP was reported 207 times. Confidence of Abuse is 15%: ?

15%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Reston, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.158.252

Whois 104.28.158.252

IP Abuse Reports for 104.28.158.252:

This IP address has been reported a total of 207 times from 150 distinct sources. 104.28.158.252 was first reported on November 23rd 2023, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-08-25 11:27:37 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 FeG Deutschland	2026-08-25 10:31:34 (10 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇮🇹 VHosting	2026-04-26 11:13:45 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇨🇭 backslash	2026-04-20 20:48:25 (4 months ago)		DDoS Attack
Anonymous	2026-02-06 06:55:09 (6 months ago)	SuspiciousB Activity detected by FMBAD System 2026-02-06 09:55:09	Port Scan Hacking Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-05-25 12:34:45 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 Study Bitcoin 🤗	2024-11-05 12:58:32 (1 year ago)	Port probe to tcp/8 (unassigned) [srv127]	Port Scan
🇨🇿 lp	2024-01-24 14:51:00 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 104.28.158.252 2024-01-24T12:55:48+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 104.28.158.252 2024-01-24T12:55:48+01:00 vpn Access-Reject '[email protected]' station: 104.28.158.252 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇦 wil.com	2024-01-19 13:52:32 (2 years ago)	GlobalProtect login attempts with user tsmith.	VPN IP Brute-Force
🇩🇪 Shivakumar Gurumurthy	2023-12-02 18:33:54 (2 years ago)	2023-11-23 20:57:53,219 fail2ban.actions [336505]: NOTICE [sshd] Ban 104.28.158.252 2023-11- ... show more 2023-11-23 20:57:53,219 fail2ban.actions [336505]: NOTICE [sshd] Ban 104.28.158.252 2023-11-23 20:57:53,219 fail2ban.actions [336505]: NOTICE [sshd] Ban 104.28.158.252 2023-11-23 20:57:53,219 fail2ban.actions [336505]: NOTICE [sshd] Ban 104.28.158.252 ... show less	Brute-Force SSH
🇩🇪 KeksGauner	2023-11-30 03:29:15 (2 years ago)	Nov 30 04:25:38 v4940 sshd[1517765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Nov 30 04:25:38 v4940 sshd[1517765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.158.252 user=root Nov 30 04:25:40 v4940 sshd[1517765]: Failed password for root from 104.28.158.252 port 51992 ssh2 Nov 30 04:29:15 v4940 sshd[1517786]: Invalid user ftp_user from 104.28.158.252 port 51459 ... show less	Brute-Force SSH
🇮🇪 alutech	2023-11-30 03:28:50 (2 years ago)	Nov 30 03:20:14 ip-172-31-39-52 sshd\[22298\]: Invalid user node2 from 104.28.158.252 Nov 30 03:27:1 ... show more Nov 30 03:20:14 ip-172-31-39-52 sshd\[22298\]: Invalid user node2 from 104.28.158.252 Nov 30 03:27:12 ip-172-31-39-52 sshd\[25966\]: Invalid user ft from 104.28.158.252 Nov 30 03:28:49 ip-172-31-39-52 sshd\[26518\]: Invalid user ftp_user from 104.28.158.252 ... show less	Brute-Force SSH
🇫🇷 Max la Menace	2023-11-30 02:13:37 (2 years ago)	ssh brute force (P)	Brute-Force SSH
🇬🇧 oolivero45	2023-11-30 02:13:32 (2 years ago)	Nov 30 02:03:59 nervous-edison8 sshd[2566080]: Failed password for invalid user cesar from 104.28.15 ... show more Nov 30 02:03:59 nervous-edison8 sshd[2566080]: Failed password for invalid user cesar from 104.28.158.252 port 52108 ssh2 Nov 30 02:08:47 nervous-edison8 sshd[2568332]: Invalid user ronny from 104.28.158.252 port 51018 Nov 30 02:08:47 nervous-edison8 sshd[2568332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.158.252 Nov 30 02:08:49 nervous-edison8 sshd[2568332]: Failed password for invalid user ronny from 104.28.158.252 port 51018 ssh2 Nov 30 02:13:31 nervous-edison8 sshd[2570466]: Invalid user cielo from 104.28.158.252 port 51871 ... show less	Brute-Force SSH
🇩🇪 OHOST.BG	2023-11-30 02:02:42 (2 years ago)	Nov 30 01:59:05 arena sshd[719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Nov 30 01:59:05 arena sshd[719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.158.252 Nov 30 01:59:07 arena sshd[719]: Failed password for invalid user kirin from 104.28.158.252 port 50678 ssh2 Nov 30 02:02:42 arena sshd[2041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.158.252 ... show less	Brute-Force SSH

Showing 1 to 15 of 207 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.209

🇧🇪 198.235.24.255

🇵🇱 193.239.59.33

🇦🇷 181.84.89.181

🇺🇸 172.217.36.17

🇺🇸 45.33.12.122

🇱🇹 213.176.26.175

🇺🇸 192.178.65.29

🇲🇽 187.211.173.54

🇺🇸 165.227.62.247

🇨🇳 182.32.199.32

🇬🇧 123.58.207.81

🇳🇱 91.92.42.68

🇧🇬 79.124.62.230

🇷🇺 37.110.113.113

🇸🇬 35.187.231.181

🇸🇬 13.228.81.138

🇺🇸 2607:f8b0:4001:c5f::125

🇬🇧 185.247.137.217

🇧🇩 161.248.189.72