JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.209.111

104.28.209.111

Neutral Activity

371 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Cloudflare, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS13335

Domain Name

cloudflare.com

Country

🇺🇸 United States of America

City

Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.28.209.111:

This IP address has been reported a total of 371 times from 137 distinct sources. 104.28.209.111 was first reported on March 13th 2023, and the most recent report was 4 weeks ago. In the last 60 days, the only reporter location was: Indonesia with 2 reports. The most common categories in these recent reports were: Port Scan 2 times; SSH 2 times; IoT Targeted 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Namor	2026-08-16 01:02:33 (4 weeks ago)		Port Scan SSH IoT Targeted
🇮🇩 Namor	2026-08-12 14:00:38 (1 month ago)		Port Scan SSH IoT Targeted
🇨🇳 ThreatBook.io	2023-04-08 00:21:15 (3 years ago)	ThreatBook Intelligence: Brute Force more details on http://threatbook.io/ip/104.28.209.111	SSH
Anonymous	2023-04-07 16:40:04 (3 years ago)	Apr 7 16:40:01 scw-6657dc sshd[26420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Apr 7 16:40:01 scw-6657dc sshd[26420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.209.111 Apr 7 16:40:01 scw-6657dc sshd[26420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.209.111 Apr 7 16:40:03 scw-6657dc sshd[26420]: Failed password for invalid user user from 104.28.209.111 port 24721 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-07 15:04:18 (3 years ago)	104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ... show more 104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 10:03:41 15676 sshd[21148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.108.105 user=root Apr 7 10:03:43 15676 sshd[21148]: Failed password for root from 24.199.108.105 port 38452 ssh2 Apr 7 10:01:55 15676 sshd[20919]: Failed password for root from 24.199.108.105 port 49666 ssh2 Apr 7 10:01:53 15676 sshd[20919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.108.105 user=root Apr 7 10:04:09 15676 sshd[21203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.209.111 user=root IP Addresses Blocked: 24.199.108.105 (US/United States/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-07 09:49:31 (3 years ago)	104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ... show more 104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 04:49:15 14209 sshd[11070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.209.112 user=root Apr 7 04:39:54 14209 sshd[10208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.209.111 user=root Apr 7 04:39:56 14209 sshd[10208]: Failed password for root from 104.28.209.111 port 11460 ssh2 Apr 7 04:41:44 14209 sshd[10382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.241.117 user=root Apr 7 04:41:45 14209 sshd[10382]: Failed password for root from 104.28.241.117 port 34496 ssh2 IP Addresses Blocked: 104.28.209.112 (US/United States/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-07 08:00:28 (3 years ago)	104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 ... show more 104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 07:54:33 24096 sshd[2924]: Invalid user ubuntu from 104.28.209.115 port 23699 Apr 7 07:54:35 24096 sshd[2924]: Failed password for invalid user ubuntu from 104.28.209.115 port 23699 ssh2 Apr 7 07:45:20 24096 sshd[2549]: Invalid user ubuntu from 104.28.241.114 port 63340 Apr 7 07:45:23 24096 sshd[2549]: Failed password for invalid user ubuntu from 104.28.241.114 port 63340 ssh2 Apr 7 08:00:13 24096 sshd[3190]: Invalid user ubuntu from 104.28.209.111 port 24608 IP Addresses Blocked: 104.28.209.115 (US/United States/-) 104.28.241.114 (US/United States/-) show less	Brute-Force SSH
🇺🇸 Dan Habot	2023-04-07 07:04:59 (3 years ago)	2023-04-07T03:06:16.195726-04:00 workstation sshd[1752004]: Invalid user user from 104.28.209.111 po ... show more 2023-04-07T03:06:16.195726-04:00 workstation sshd[1752004]: Invalid user user from 104.28.209.111 port 14409 ... show less	Brute-Force SSH
🇩🇪 vereinshosting	2023-04-07 03:50:12 (3 years ago)	Invalid user ubuntu from 104.28.209.111 port 23584	Brute-Force SSH
Anonymous	2023-04-07 03:41:12 (3 years ago)	Brute force SSH login	Brute-Force SSH
🇩🇪 Onno Achterndiek	2023-04-07 02:01:21 (3 years ago)	Apr 7 03:40:48 web2 sshd[148744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Apr 7 03:40:48 web2 sshd[148744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.209.111 Apr 7 03:40:50 web2 sshd[148744]: Failed password for invalid user ubuntu from 104.28.209.111 port 23482 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-07 01:43:45 (3 years ago)	104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ... show more 104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 6 20:30:20 13904 sshd[22952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.44.63.73 user=root Apr 6 20:43:39 13904 sshd[24199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.209.111 user=root Apr 6 20:43:41 13904 sshd[24199]: Failed password for root from 104.28.209.111 port 64921 ssh2 Apr 6 20:32:14 13904 sshd[23155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.241.117 user=root Apr 6 20:32:16 13904 sshd[23155]: Failed password for root from 104.28.241.117 port 50832 ssh2 IP Addresses Blocked: 8.44.63.73 (CA/Canada/-) show less	Brute-Force SSH
🇩🇪 rubefeli	2023-04-06 20:19:38 (3 years ago)	Apr 6 22:19:37 v220221280851213123 sshd[18568]: Failed password for root from 104.28.209.111 port 1 ... show more Apr 6 22:19:37 v220221280851213123 sshd[18568]: Failed password for root from 104.28.209.111 port 11513 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-06 20:19:17 (3 years ago)	104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ... show more 104.28.209.111 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 6 20:19:00 23563 sshd[24373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.209.111 user=root Apr 6 20:15:16 23563 sshd[24230]: Failed password for root from 104.28.209.110 port 13869 ssh2 Apr 6 20:15:14 23563 sshd[24230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.209.110 user=root Apr 6 20:06:03 23563 sshd[23835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.241.114 user=root Apr 6 20:06:05 23563 sshd[23835]: Failed password for root from 104.28.241.114 port 16054 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇭🇺 szkiddaj	2023-04-06 19:18:16 (3 years ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" and password "10203040" at 2 ... show more Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" and password "10203040" at 2023-04-06T19:18:16Z show less	Brute-Force SSH

Showing 1 to 15 of 371 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 93.152.209.11

🇦🇷 190.111.114.76

🇲🇽 187.149.78.46

🇳🇱 185.242.226.62

🇧🇷 181.189.10.248

🇺🇸 167.160.169.224

🇳🇱 146.0.74.214

🇳🇱 80.82.77.139

🇫🇷 54.36.99.29

🇨🇦 34.19.150.17

🇺🇸 2604:a880:400:d1:0:4:f72c:a001

🇺🇸 203.168.148.46

🇺🇸 192.6.121.28

🇧🇷 186.248.250.51

🇫🇷 185.214.199.245

🇬🇧 185.192.71.189

🇧🇷 179.0.127.120

🇺🇸 165.154.36.108

🇸🇬 161.118.211.34

🇺🇸 151.241.121.248