This IP address has been reported a total of
9
times from
6 distinct
sources.
104.28.208.135 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Poland
with 2
reports;
United States of America
with 2
reports;
Australia
with 1
report.
The most common categories in these recent reports were:
Port Scan
3
times;
Brute-Force
2
times;
Hacking
2
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Oct 14 04:49:15 104.28.208.135 TCP SPT=31111 DPT=1111 SYN
Oct 14 04:49:16 104.28.208.135 TCP SPT=311 ...
show moreOct 14 04:49:15 104.28.208.135 TCP SPT=31111 DPT=1111 SYN
Oct 14 04:49:16 104.28.208.135 TCP SPT=31111 DPT=1111 SYN
Oct 14 04:49:17 104.28.208.135 TCP SPT=31111 DPT=1111
...
show less
Oct 11 16:23:08 104.28.208.135 TCP SPT=44573 DPT=1111 SYN
Oct 11 16:23:09 104.28.208.135 TCP SPT=445 ...
show moreOct 11 16:23:08 104.28.208.135 TCP SPT=44573 DPT=1111 SYN
Oct 11 16:23:09 104.28.208.135 TCP SPT=44573 DPT=1111 SYN
Oct 11 16:23:10 104.28.208.135 TCP SPT=44573 DPT=1111 SYN
...
show less
Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense cou ...
show moreFailed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 2. Last seen 2026-09-26 11:24 UTC, first seen 2026-09-24 UTC. Automated detection. Follow-up: attacks continued after our previous report (1 earlier, latest 2026-09-24 08:32 UTC). AS13335 Cloudflare, Inc..
show less
MikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-09-24 08:09 UTC. Part of ...
show moreMikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-09-24 08:09 UTC. Part of a distributed credential-stuffing campaign: 12 distinct source IPs attempted the same username against our infrastructure within the same hour. Automated detection. AS13335 Cloudflare, Inc..
show less
A web attack was detected from 104.28.208.135 (China / Shanghai / Shanghai) against phantom.second-e ...
show moreA web attack was detected from 104.28.208.135 (China / Shanghai / Shanghai) against phantom.second-edge.com (PHPUnit).
show less
