104.28.159.72

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
2% Caution
15 reports
11 reporters · latest 1 week ago
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇪🇪 Estonia
City
Tallinn, Harjumaa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 11 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇷🇴 Romania 2
Most common categories SSH 2 Brute-Force 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇴 iulianh
25,465,587
Brute-Force SSH
🇷🇴 iulianh
25,465,587
Brute-Force SSH
🇸🇪 NordhTech
More than 3 malicious connection attempts, trying port(s) 5222/tcp, then blocked from services ...
Port Scan Hacking
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇨🇳 鹏鹏
monitor: on VM-0-7-ubuntu | port: 12949 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇨🇳 鹏鹏
monitor: on VM-0-7-ubuntu | port: 12949 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 104.28.159.72 2026-07-09T22:47:24+02:00 warning: unknown[104.28.159.72]: SASL PLAIN authentication failed: authentication failure, [email protected]
Brute-Force
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇷🇴 iulianh
25,465,587
Brute-Force SSH
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force
🇺🇸 LockBlock
2026-04-04 11:42:37: Minecraft server scan detected from 104.28.159.72 on port 25565 of racknerd-e7e1a9
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 123) Source port: 12498 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 104.28.159.72) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇮🇳 liveaspankaj
DDoS attack: 356 requests in 5m (GET / or repair.php).
DDoS Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 120.26.220.254
🇰🇷 118.193.69.235
🇪🇸 85.60.36.223
🇩🇪 69.5.169.63
🇺🇸 68.10.53.88
🇺🇸 34.132.1.5
🇩🇪 109.160.32.36
🇺🇸 70.175.182.57
🇰🇷 211.54.103.121
🇳🇱 195.178.110.78
🇬🇧 134.65.62.240
🇵🇱 94.26.68.131
🇫🇷 91.196.152.39
🇺🇦 37.221.143.80
🇧🇪 34.156.64.247
🇧🇪 34.79.135.70
feedback