JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.211.111

104.28.211.111 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.211.111

Whois 104.28.211.111

IP Abuse Reports for 104.28.211.111:

This IP address has been reported a total of 27 times from 20 distinct sources. 104.28.211.111 was first reported on January 23rd 2024, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2025-09-02 00:26:09 (9 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.28.211.111	SSH
🇺🇸 Anybody9975	2025-09-01 18:59:59 (9 months ago)	4 SSH login attempts on 2025-09-01	Brute-Force SSH
🇺🇸 anon333	2025-09-01 16:33:16 (9 months ago)	Hacker syslog review 1756744396	Hacking
🇺🇸 bigscoots.com	2025-09-01 16:01:34 (9 months ago)	104.28.211.111 (JM/Jamaica/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more 104.28.211.111 (JM/Jamaica/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 1 11:01:31 14775 sshd[20078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.211.111 user=root Sep 1 11:00:22 14775 sshd[19955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.76.234 user=root Sep 1 11:00:25 14775 sshd[19955]: Failed password for root from 14.103.76.234 port 52796 ssh2 Sep 1 10:33:19 14775 sshd[17810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.234.57 user=root Sep 1 10:46:38 14775 sshd[18884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.184.50.251 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 yzfdude1	2025-09-01 15:14:40 (9 months ago)	Sep 1 09:14:36 bluto sshd[888274]: Failed password for root from 104.28.211.111 port 60282 ssh2 Sep ... show more Sep 1 09:14:36 bluto sshd[888274]: Failed password for root from 104.28.211.111 port 60282 ssh2 Sep 1 09:14:38 bluto sshd[888276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.211.111 user=root Sep 1 09:14:40 bluto sshd[888276]: Failed password for root from 104.28.211.111 port 60208 ssh2 ... show less	Brute-Force SSH
🇳🇴 thorn5011	2025-09-01 14:46:57 (9 months ago)	Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2025-09-01T14:46:52Z and 2025-09-0 ... show more Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2025-09-01T14:46:52Z and 2025-09-01T14:46:56Z show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-01 14:38:54 (9 months ago)	(sshd) Failed SSH login from 104.28.211.111 (JM/Jamaica/-): 5 in the last 3600 secs; Ports: ; Direc ... show more (sshd) Failed SSH login from 104.28.211.111 (JM/Jamaica/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 1 09:38:33 5388 sshd[7651]: Did not receive identification string from 104.28.211.111 port 59949 Sep 1 09:38:36 5388 sshd[7653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.211.111 user=root Sep 1 09:38:38 5388 sshd[7653]: Failed password for root from 104.28.211.111 port 59990 ssh2 Sep 1 09:38:40 5388 sshd[7659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.211.111 user=root Sep 1 09:38:41 5388 sshd[7659]: Failed password for root from 104.28.211.111 port 60140 ssh2 show less	Brute-Force SSH
🇩🇪 Szymekk	2025-09-01 14:38:31 (9 months ago)	Fail2Ban: SSH brute force attempt from 104.28.211.111	Brute-Force SSH
🇹🇷 Xargana	2025-09-01 13:56:13 (9 months ago)	Fail2Ban sshd	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-01 13:43:30 (9 months ago)	104.28.211.111 (JM/Jamaica/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more 104.28.211.111 (JM/Jamaica/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 1 08:39:31 16405 sshd[21496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.126.11.137 user=root Sep 1 08:39:33 16405 sshd[21496]: Failed password for root from 101.126.11.137 port 58798 ssh2 Sep 1 08:43:09 16405 sshd[21842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.211.111 user=root Sep 1 08:43:12 16405 sshd[21842]: Failed password for root from 104.28.211.111 port 60341 ssh2 Sep 1 08:43:25 16405 sshd[21848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.211.111 user=root IP Addresses Blocked: 101.126.11.137 (CN/China/-) show less	Brute-Force SSH
Anonymous	2025-09-01 13:30:07 (9 months ago)	2025-09-01T15:29:59.910964+02:00 hosting15 sshd[2978894]: Failed password for root from 104.28.211.1 ... show more 2025-09-01T15:29:59.910964+02:00 hosting15 sshd[2978894]: Failed password for root from 104.28.211.111 port 60191 ssh2 2025-09-01T15:30:04.944135+02:00 hosting15 sshd[2979024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.211.111 user=root 2025-09-01T15:30:07.197275+02:00 hosting15 sshd[2979024]: Failed password for root from 104.28.211.111 port 60113 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-01 13:17:31 (9 months ago)	(sshd) Failed SSH login from 104.28.211.111 (JM/Jamaica/-): 5 in the last 3600 secs; Ports: ; Direc ... show more (sshd) Failed SSH login from 104.28.211.111 (JM/Jamaica/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 1 08:16:48 16183 sshd[3929]: Did not receive identification string from 104.28.211.111 port 60261 Sep 1 08:16:49 16183 sshd[3933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.211.111 user=root Sep 1 08:16:52 16183 sshd[3933]: Failed password for root from 104.28.211.111 port 60106 ssh2 Sep 1 08:17:09 16183 sshd[3993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.211.111 user=root Sep 1 08:17:11 16183 sshd[3993]: Failed password for root from 104.28.211.111 port 59929 ssh2 show less	Brute-Force SSH
🇺🇸 xmission.com	2025-08-31 17:57:41 (9 months ago)	Blocked by UFW (TCP on 52176) Source port: 19836 TTL: 50 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 52176) Source port: 19836 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 104.28.211.111) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2024-05-31 09:10:22 (2 years ago)		Web App Attack SSH
Anonymous	2024-05-27 03:57:41 (2 years ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a09:bac2:4d7d:2e3c::49b:4d

🇩🇪 162.158.95.76

🇺🇸 64.62.197.72

🇨🇦 34.186.208.198

🇻🇳 27.71.21.70

🇰🇷 211.254.212.59

🇨🇳 211.149.134.60

🇨🇳 202.46.62.2

🇷🇺 201.51.0.46

🇭🇰 152.32.169.129

🇨🇳 120.193.9.167

🇸🇬 103.7.11.134

🇩🇪 45.135.193.193

🇬🇧 35.203.210.160

🇧🇪 34.76.4.100

🇨🇦 216.181.38.7

🇳🇱 178.230.81.141

🇷🇺 176.211.42.202

🇫🇷 146.70.40.70

🇺🇸 72.10.32.138