This IP address has been reported a total of
185
times from
38 distinct
sources.
104.28.196.109 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 9850)
Source port: 30373
TTL: 48
Packet length: 60
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 9850)
Source port: 30373
TTL: 48
Packet length: 60
TOS: 0x00
This report (for 104.28.196.109) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 9850)
Source port: 30670
TTL: 43
Packet length: 60
TOS: 0x08
This report (fo ...
show moreBlocked by UFW (TCP on 9850)
Source port: 30670
TTL: 43
Packet length: 60
TOS: 0x08
This report (for 104.28.196.109) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ...
show moreReconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 33900/tcp. Observed event time: 2026-05-21 21:23:15 UTC. Report from passive honeypot only; no payload or credentials included.
show less
Blocked by UFW (TCP on 53912)
Source port: 30332
TTL: 43
Packet length: 60
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 53912)
Source port: 30332
TTL: 43
Packet length: 60
TOS: 0x08
This report (for 104.28.196.109) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ipinfo.io:443
show less
Blocked by UFW (TCP on 8999)
Source port: 61887
TTL: 43
Packet length: 60
TOS: 0x08
This report (fo ...
show moreBlocked by UFW (TCP on 8999)
Source port: 61887
TTL: 43
Packet length: 60
TOS: 0x08
This report (for 104.28.196.109) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 6969)
Source port: 30057
TTL: 43
Packet length: 60
TOS: 0x08
This report (fo ...
show moreBlocked by UFW (TCP on 6969)
Source port: 30057
TTL: 43
Packet length: 60
TOS: 0x08
This report (for 104.28.196.109) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-04-14T20:54:20.338144+02:00 mail postfix/smtps/smtpd[295157]: warning: unknown[104.28.196.109]: ...
show more2026-04-14T20:54:20.338144+02:00 mail postfix/smtps/smtpd[295157]: warning: unknown[104.28.196.109]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
2026-04-14T20:54:20.397471+02:00 mail postfix/smtps/smtpd[295157]: disconnect from unknown[104.28.196.109] ehlo=1 auth=0/1 commands=1/2
...
show less
Brute-Force
Email Spam
Showing 1 to
15
of 185 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ