104.28.196.100
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- 🇧🇷 Brazil
- City
- Londrina, Parana
Abuse Reports
Total reports
23 from
16 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 benjensen |
SSH honeypot — automated credential stuffing and scanning detected by Cowrie honeypot
|
Brute-Force SSH | |
| 🇺🇸 uhhhhhhyeahnotanythingthatislikemyotheraccountsanywhereelse |
5 login or exploit attempts on SSH/22, 2026-10-14 11:05-11:05 UTC
|
Brute-Force SSH | |
| 🇺🇸 lukascomer |
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-10-14T10:59:29Z
|
Brute-Force SSH | |
| 🇺🇸 www.winos.me |
Shield: SSH Brute Force
|
Brute-Force SSH | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
|
Bad Web Bot | |
| 🇧🇷 chronos |
Generic malicious activity: Tentativa de varredura de porta TCP... | Port: 59601 | Proto: TCP | Location: Brazil, Londrina
|
Port Scan Hacking | |
| 🇨🇿 lp |
Email account brute force: 1 attempts were recorded from 104.28.196.100
2026-08-18T20:44:29+02:00 warning: unknown[104.28.196.100]: SASL PLAIN authentication failed: authentication failure, [email protected]
|
Brute-Force | |
| 🇹🇷 ferique |
Real-time Intercept: SMTP attack. Reference: 2026-08-18 22:47:33.6080 Login failure: 104.28.196.100 SMTP
|
Brute-Force Email Spam | |
| 🇮🇹 VHosting |
Detected mail brute force attack from different servers
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown