JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.205.120

104.28.205.120 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 50%: ?

50%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Gainesville, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.205.120

Whois 104.28.205.120

IP Abuse Reports for 104.28.205.120:

This IP address has been reported a total of 19 times from 12 distinct sources. 104.28.205.120 was first reported on May 11th 2025, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-21 01:30:03 (9 minutes ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇺🇸 Axel	2026-06-16 04:39:35 (4 days ago)	Blocked by UFW on MVI [8180/tcp] \| SPT: 15169 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [8180/tcp] \| SPT: 15169 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-13 22:30:05 (1 week ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇺🇸 axl	2026-06-11 16:47:07 (1 week ago)	Blocked by UFW on MVI [9080/tcp] \| SPT: 18404 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [9080/tcp] \| SPT: 18404 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-06-11 04:28:51 (1 week ago)	UFW Blocked [5555/TCP] Source: 104.28.205.120:53912 TTL: 55 Lenth: 60 TOS: 0x00	Port Scan
🇫🇷 GabrielJST	2026-06-08 07:23:30 (1 week ago)	Port Scan detected from 104.28.205.120 (US/United States/-).	Port Scan
🇫🇷 sthoyer.de	2026-06-06 08:45:49 (2 weeks ago)	Jun 6 10:45:47 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jun 6 10:45:47 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.205.120 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=15679 DF PROTO=TCP SPT=43941 DPT=88 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 podril1ak2.ru	2026-06-06 07:45:29 (2 weeks ago)	Blocked by UFW on reporterUS [8000/tcp] \| SPT: 10785 \| TTL: 57 \| LEN: 60 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on reporterUS [8000/tcp] \| SPT: 10785 \| TTL: 57 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 sthoyer.de	2026-06-05 01:21:57 (2 weeks ago)	Jun 5 03:21:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jun 5 03:21:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.205.120 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20556 DF PROTO=TCP SPT=11687 DPT=10000 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 5 03:21:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.205.120 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20557 DF PROTO=TCP SPT=11687 DPT=10000 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 5 03:21:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.205.120 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20557 DF PROTO=TCP SPT=11687 DPT=10000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cazae	2026-06-04 12:27:20 (2 weeks ago)	Unauthorized attempt on debian [50050/tcp] Source port: 10583 TTL: 54 Packet length: 60 TOS: 0x00 h ... show more Unauthorized attempt on debian [50050/tcp] Source port: 10583 TTL: 54 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 cazae	2026-06-02 00:51:00 (2 weeks ago)	Unauthorized attempt on debian [8008/tcp] Source port: 12123 TTL: 54 Packet length: 60 TOS: 0x00 ht ... show more Unauthorized attempt on debian [8008/tcp] Source port: 12123 TTL: 54 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-18 12:30:05 (1 month ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 sthoyer.de	2026-05-18 00:36:07 (1 month ago)	May 18 02:36:03 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more May 18 02:36:03 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.205.120 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=25068 DF PROTO=TCP SPT=62488 DPT=4443 WINDOW=65535 RES=0x00 SYN URGP=0 May 18 02:36:04 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.205.120 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=25069 DF PROTO=TCP SPT=62488 DPT=4443 WINDOW=65535 RES=0x00 SYN URGP=0 May 18 02:36:04 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.205.120 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=25069 DF PROTO=TCP SPT=62488 DPT=4443 WINDOW=65535 RES=0x00 SYN URGP=0 May 18 02:36:05 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.205.120 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=25070 DF PROTO=TCP SPT=62488 DPT=4443 WI ... show less	Port Scan
🇫🇷 GabrielJST	2026-05-17 16:14:20 (1 month ago)	Port Scan detected from 104.28.205.120 (US/United States/-).	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.72.68.119

🇮🇪 128.251.36.118

🇨🇳 115.190.44.249

🇸🇬 114.119.135.251

🇵🇰 111.92.151.130

🇲🇦 105.188.112.33

🇨🇳 14.19.128.205

🇩🇪 216.26.247.168

🇺🇸 205.210.31.71

🇺🇸 202.51.78.3

🇫🇷 172.71.118.252

🇻🇳 157.10.44.160

🇫🇮 147.185.133.101

🇺🇸 135.180.150.252

🇨🇳 115.50.196.49

🇺🇸 72.17.34.38

🇱🇹 45.227.254.170

🇳🇱 45.148.10.151

🇺🇸 34.16.190.187

🇩🇪 3.65.197.40