JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.201.80

104.28.201.80 was found in our database!

This IP was reported 458 times. Confidence of Abuse is 4%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.201.80

Whois 104.28.201.80

IP Abuse Reports for 104.28.201.80:

This IP address has been reported a total of 458 times from 210 distinct sources. 104.28.201.80 was first reported on December 20th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-07-25 09:09:03 (1 day ago)	MatShield L7: blocked on mathost.eu (path-flood-burst)	DDoS Attack
🇫🇷 MatStef132	2026-07-21 13:37:53 (5 days ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇨🇳 ThreatBook.io	2023-04-07 23:37:11 (3 years ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/104.28.201.80	Brute-Force
🇺🇸 bigscoots.com	2023-04-07 15:25:53 (3 years ago)	104.28.201.80 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 se ... show more 104.28.201.80 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 15:17:22 24104 sshd[26125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.115.18.214 user=root Apr 7 15:17:25 24104 sshd[26125]: Failed password for root from 82.115.18.214 port 40756 ssh2 Apr 7 15:25:37 24104 sshd[26807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 user=root Apr 7 15:17:40 24104 sshd[26128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.115.18.214 user=root Apr 7 15:12:04 24104 sshd[25792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.115.18.214 user=root Apr 7 15:12:05 24104 sshd[25792]: Failed password for root from 82.115.18.214 port 40158 ssh2 IP Addresses Blocked: 82.115.18.214 (DE/Germany/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-07 11:26:12 (3 years ago)	104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 06:25:56 16090 sshd[17894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 user=root Apr 7 06:18:53 16090 sshd[17411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.233.78 user=root Apr 7 06:18:55 16090 sshd[17411]: Failed password for root from 104.28.233.78 port 57030 ssh2 Apr 7 06:17:04 16090 sshd[17344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.77 user=root Apr 7 06:17:06 16090 sshd[17344]: Failed password for root from 104.28.201.77 port 39723 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-07 10:21:11 (3 years ago)	104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 05:12:10 16913 sshd[24923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.78 user=root Apr 7 05:12:13 16913 sshd[24923]: Failed password for root from 104.28.201.78 port 25551 ssh2 Apr 7 05:15:40 16913 sshd[25056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 user=root Apr 7 05:15:43 16913 sshd[25056]: Failed password for root from 104.28.201.80 port 46927 ssh2 Apr 7 05:21:00 16913 sshd[25266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.233.79 user=root IP Addresses Blocked: 104.28.201.78 (US/United States/-) show less	Brute-Force SSH
🇷🇴 eddy.ro	2023-04-07 09:34:43 (3 years ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-07 09:24:29 (3 years ago)	104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 09:20:47 24133 sshd[32218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.78 user=root Apr 7 09:22:37 24133 sshd[32322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 user=root Apr 7 09:22:38 24133 sshd[32322]: Failed password for root from 104.28.201.80 port 33270 ssh2 Apr 7 09:20:49 24133 sshd[32218]: Failed password for root from 104.28.201.78 port 49700 ssh2 Apr 7 09:24:25 24133 sshd[32428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.78 user=root IP Addresses Blocked: 104.28.201.78 (US/United States/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-07 04:58:26 (3 years ago)	104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 6 23:58:13 15011 sshd[14869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 user=root Apr 6 23:56:24 15011 sshd[14742]: Failed password for root from 104.28.233.79 port 26446 ssh2 Apr 6 23:56:22 15011 sshd[14742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.233.79 user=root Apr 6 23:52:37 15011 sshd[14409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.233.81 user=root Apr 6 23:52:40 15011 sshd[14409]: Failed password for root from 104.28.233.81 port 59764 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇬🇧 paulcdb	2023-04-07 01:08:48 (3 years ago)	Apr 7 02:08:46 pansy auth.info sshd[6284]: Disconnected from authenticating user root 104.28.201.80 ... show more Apr 7 02:08:46 pansy auth.info sshd[6284]: Disconnected from authenticating user root 104.28.201.80 port 16052 [preauth] ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-07 00:00:01 (3 years ago)	104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 6 18:55:58 15729 sshd[20439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.131.253.76 user=root Apr 6 18:56:01 15729 sshd[20439]: Failed password for root from 43.131.253.76 port 42546 ssh2 Apr 6 18:56:02 15729 sshd[20499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 user=root Apr 6 18:56:04 15729 sshd[20499]: Failed password for root from 104.28.201.80 port 43526 ssh2 Apr 6 18:59:52 15729 sshd[20775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.233.79 user=root IP Addresses Blocked: 43.131.253.76 (KR/South Korea/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-06 21:23:38 (3 years ago)	104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 6 16:23:21 16218 sshd[10974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 user=root Apr 6 16:21:32 16218 sshd[10830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 user=root Apr 6 16:21:34 16218 sshd[10830]: Failed password for root from 104.28.201.80 port 39842 ssh2 Apr 6 16:19:42 16218 sshd[10683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.76 user=root Apr 6 16:19:44 16218 sshd[10683]: Failed password for root from 104.28.201.76 port 47851 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-06 18:48:38 (3 years ago)	104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 104.28.201.80 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 6 13:48:17 14906 sshd[20314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.76 user=root Apr 6 13:44:44 14906 sshd[20070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.233.76 user=root Apr 6 13:44:46 14906 sshd[20070]: Failed password for root from 104.28.233.76 port 56442 ssh2 Apr 6 13:42:57 14906 sshd[19956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 user=root Apr 6 13:43:00 14906 sshd[19956]: Failed password for root from 104.28.201.80 port 19452 ssh2 IP Addresses Blocked: 104.28.201.76 (US/United States/-) 104.28.233.76 (US/United States/-) show less	Brute-Force SSH
🇫🇷 dsl	2023-04-06 16:57:11 (3 years ago)	Apr 6 16:57:09 dgserver sshd[505]: Invalid user ftp from 104.28.201.80 port 13433 Apr 6 16:57:09 d ... show more Apr 6 16:57:09 dgserver sshd[505]: Invalid user ftp from 104.28.201.80 port 13433 Apr 6 16:57:09 dgserver sshd[505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.201.80 Apr 6 16:57:11 dgserver sshd[505]: Failed password for invalid user ftp from 104.28.201.80 port 13433 ssh2 ... show less	Brute-Force SSH
🇺🇸 m2jest1c	2023-04-06 15:33:51 (3 years ago)	Apr 6 15:33:50 instance1 sshd[2849323]: Invalid user kk from 104.28.201.80 port 16681 ...	Brute-Force SSH

Showing 1 to 15 of 458 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 203.83.234.180

🇺🇸 172.236.228.227

🇺🇸 152.32.206.246

🇭🇰 150.109.53.189

🇮🇳 139.59.18.80

🇮🇳 122.187.226.21

🇮🇳 103.252.168.129

🇧🇬 78.128.114.66

🇺🇸 43.172.83.90

🇩🇪 193.124.20.250

🇪🇨 177.53.213.108

🇻🇳 171.244.201.80

🇭🇰 152.32.215.224

🇧🇷 152.32.200.213

🇮🇳 117.247.23.131

🇹🇼 111.70.29.132

🇫🇷 85.217.140.30

🇺🇸 65.49.1.137

🇧🇷 45.205.1.241

🇺🇸 20.118.217.73