This IP address has been reported a total of
148
times from
58 distinct
sources.
104.28.162.138 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 123)
Source port: 22155
TTL: 50
Packet length: 60
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 123)
Source port: 22155
TTL: 50
Packet length: 60
TOS: 0x08
This report (for 104.28.162.138) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(smtpauth) Failed SMTP AUTH login from 104.28.162.138 (Unknown): 4 in the last 3600 secs; Ports: *; ...
show more(smtpauth) Failed SMTP AUTH login from 104.28.162.138 (Unknown): 4 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs:
show less
(smtpauth) Failed SMTP AUTH login from 104.28.162.138 (CA/Canada/-): 5 in the last 3600 secs; Ports: ...
show more(smtpauth) Failed SMTP AUTH login from 104.28.162.138 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-16 01:18:50 dovecot_plain authenticator failed for H=(smtp-probe.local) [104.28.162.138]:56428: 535 Incorrect authentication data (set_id=admin)
2026-06-16 01:18:55 dovecot_plain authenticator failed for H=(smtp-probe.local) [104.28.162.138]:56544: 535 Incorrect authentication data (set_id=admin)
2026-06-16 01:18:56 dovecot_login authenticator failed for H=(smtp-probe.local) [104.28.162.138]:56428: 535 Incorrect authentication data (set_id=admin)
2026-06-16 01:19:01 dovecot_login authenticator failed for H=(smtp-probe.local) [104.28.162.138]:56544: 535 Incorrect authentication data (set_id=admin)
2026-06-16 01:19:04 dovecot_plain authenticator failed for H=(smtp-probe.local) [104.28.162.138]:57198: 535 Incorrect authentication data (set_id=admin)
show less
(smtpauth) Failed SMTP AUTH login from 104.28.162.138 (CA/Canada/-): 1 in the last 3600 secs; Ports: ...
show more(smtpauth) Failed SMTP AUTH login from 104.28.162.138 (CA/Canada/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-06-15 20:17:04 plain authenticator failed for H=(smtp-probe.local) [104.28.162.138]: 535 Incorrect authentication data (set_id=admin)
show less
(smtpauth) Failed SMTP AUTH login from 104.28.162.138 (CA/Canada/-): 5 in the last 3600 secs; Ports: ...
show more(smtpauth) Failed SMTP AUTH login from 104.28.162.138 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-15 22:11:32 dovecot_plain authenticator failed for H=(smtp-probe.local) [104.28.162.138]:57733: 535 Incorrect authentication data (set_id=admin)
2026-06-15 22:11:36 dovecot_plain authenticator failed for H=(smtp-probe.local) [104.28.162.138]:56746: 535 Incorrect authentication data (set_id=admin)
2026-06-15 22:11:37 dovecot_plain authenticator failed for H=(smtp-probe.local) [104.28.162.138]:56079: 535 Incorrect authentication data (set_id=admin)
2026-06-15 22:11:37 dovecot_plain authenticator failed for H=(smtp-probe.local) [104.28.162.138]:57534: 535 Incorrect authentication data (set_id=admin)
2026-06-15 22:11:38 dovecot_login authenticator failed for H=(smtp-probe.local) [104.28.162.138]:57733: 535 Incorrect authentication data (set_id=admin)
show less
2026-06-15T21:27:17.280317+02:00 X postfix/submission/smtpd[420495]: lost connection after CONNECT f ...
show more2026-06-15T21:27:17.280317+02:00 X postfix/submission/smtpd[420495]: lost connection after CONNECT from unknown[104.28.162.138]
2026-06-15T21:27:17.280393+02:00 X postfix/smtps/smtpd[420496]: lost connection after CONNECT from unknown[104.28.162.138]
2026-06-15T21:27:30.056283+02:00 X postfix/smtps/smtpd[420496]: NOQUEUE: reject: RCPT from unknown[104.28.162.138]: 554 5.7.1 <X>: Client host rejected: Access denied; from=<X> to=<X> proto=ESMTP helo=<X>
show less
Cluster member (Omitted) (FR/France/-) said, DENY 104.28.162.138, Reason:[(smtpauth) Failed SMTP AUT ...
show moreCluster member (Omitted) (FR/France/-) said, DENY 104.28.162.138, Reason:[(smtpauth) Failed SMTP AUTH login from 104.28.162.138 (CA/Canada/-): 5 in the last (Omitted)]
show less