JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.28.206.220

Activity Trending Down

Abuse confidence score ?

24% Elevated

15 reports

11 reporters · latest 4 weeks ago

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Orlando, Florida

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.28.206.220

This IP address has been reported a total of 15 times from 11 distinct sources. 104.28.206.220 was first reported on July 7th 2026, and the most recent report was 4 weeks ago. In the last 60 days, the top reporter locations were: France with 3 reports; Canada with 2 reports; Finland with 1 report. The most common categories in these recent reports were: Port Scan 7 times; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Tanados	2026-08-28 15:43:51 (4 weeks ago)	Blocked by UFW [82/tcp] Source port: 39428 TTL: 51 Packet length: 60 TOS: 0x00 This report was gene ... show more Blocked by UFW [82/tcp] Source port: 39428 TTL: 51 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Blinker73	2026-08-28 01:46:08 (4 weeks ago)	2026-08-27T21:46 kernel: OUT= SRC=104.28.206.220 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=39085 DF ... show more 2026-08-27T21:46 kernel: OUT= SRC=104.28.206.220 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=39085 DF PROTO=TCP SPT=30605 DPT=9001 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-27T21:46 kernel: OUT= SRC=104.28.206.220 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=39086 DF PROTO=TCP SPT=30605 DPT=9001 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-27T21:46 kernel: OUT= SRC=104.28.206.220 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=39087 DF PROTO=TCP SPT=30605 DPT=9001 WINDOW=65535 RES=0x00 SYN URGP= show less	Port Scan
Anonymous	2026-08-27 22:47:50 (4 weeks ago)	[TCP/88] Unsolicited connection attempt on a port with no legitimate public service.	Port Scan Hacking
🇫🇷 sthoyer.de	2026-08-27 19:34:34 (4 weeks ago)	Aug 27 21:34:30 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Aug 27 21:34:30 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=39398 DF PROTO=TCP SPT=53994 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 27 21:34:31 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=39399 DF PROTO=TCP SPT=53994 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 27 21:34:31 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=39399 DF PROTO=TCP SPT=53994 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 27 21:34:32 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=39400 DF PROTO=TCP SPT=53994 DPT=81 WINDOW=655 ... show less	Port Scan
Anonymous	2026-08-27 07:30:13 (4 weeks ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇳🇱 hxsain	2026-08-27 07:21:40 (4 weeks ago)	Blocked by UFW [88/tcp] \| SPT: 36209 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefin ... show more Blocked by UFW [88/tcp] \| SPT: 36209 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 sthoyer.de	2026-08-27 06:48:04 (4 weeks ago)	Aug 27 08:47:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Aug 27 08:47:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=17503 DF PROTO=TCP SPT=32744 DPT=9091 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 27 08:47:59 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=17504 DF PROTO=TCP SPT=32744 DPT=9091 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 27 08:48:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=17505 DF PROTO=TCP SPT=32744 DPT=9091 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 27 08:48:01 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=17506 DF PROTO=TCP SPT=32744 DPT=9091 WI ... show less	Port Scan
🇩🇪 ValtonTahiri	2026-07-19 03:37:51 (2 months ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=104.28.206.220; proto=TCP; source_port=44268; target_port=9443; flags=SYN show less	Port Scan
🇩🇪 EinfxchFinn	2026-07-16 06:50:11 (2 months ago)	Unauthorized connection attempt to port 50050 from 104.28.206.220	Port Scan
🇩🇪 polido	2026-07-11 04:46:38 (2 months ago)	[debian-4gb-nbg1-1] Unauthorized connection attempt to port 8880 from 104.28.206.220	Port Scan
Anonymous	2026-07-11 03:30:07 (2 months ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 SUNDAY Technologies	2026-07-10 16:04:49 (2 months ago)	... Jul 10 18:04:48 drop SRC=104.28.206.220 LEN=60 PROTO=TCP DPT=8088 ACK=0 WINDOW=65535 ... show more ... Jul 10 18:04:48 drop SRC=104.28.206.220 LEN=60 PROTO=TCP DPT=8088 ACK=0 WINDOW=65535 SYN URGP=0 MARK=0x0 show less	Port Scan
🇬🇧 sonot	2026-07-09 19:31:07 (2 months ago)	Blocked by UFW on tunneluk01 [50000/tcp] \| SPT: 45190 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [50000/tcp] \| SPT: 45190 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 sthoyer.de	2026-07-09 18:44:59 (2 months ago)	Jul 9 20:44:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jul 9 20:44:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=3098 DF PROTO=TCP SPT=62854 DPT=50000 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 9 20:44:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=3099 DF PROTO=TCP SPT=62854 DPT=50000 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 9 20:44:57 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=3100 DF PROTO=TCP SPT=62854 DPT=50000 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 9 20:44:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.206.220 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=3101 DF PROTO=TCP SPT=62854 DPT=50000 WI ... show less	Port Scan
Anonymous	2026-07-07 03:30:07 (2 months ago)	Triggered: repeated knocking on closed ports.	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 116.123.150.231

🇰🇷 34.64.123.31

🇧🇷 205.210.31.216

🇳🇿 203.211.79.152

🇮🇩 202.50.203.150

🇳🇬 197.253.54.22

🇳🇱 195.178.110.223

🇺🇸 185.180.141.106

🇳🇿 122.59.255.80

🇰🇷 119.206.113.194

🇳🇱 109.160.32.110

🇨🇭 104.244.79.113

🇲🇲 103.217.158.135

🇫🇷 85.217.140.44

🇹🇷 84.44.39.47

🇬🇧 81.19.219.217

🇺🇸 74.94.234.151

🇩🇪 69.5.169.7

🇱🇹 62.60.130.242

🇳🇱 45.74.28.4