JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.217.212

104.28.217.212 was found in our database!

This IP was reported 211 times. Confidence of Abuse is 30%: ?

30%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.217.212

Whois 104.28.217.212

IP Abuse Reports for 104.28.217.212:

This IP address has been reported a total of 211 times from 90 distinct sources. 104.28.217.212 was first reported on July 23rd 2022, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2023-04-24 03:54:41 (3 years ago)	104.28.217.212 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ... show more 104.28.217.212 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 23 22:54:28 14028 sshd[19756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.249.212 user=root Apr 23 22:45:00 14028 sshd[19136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.98.117 user=root Apr 23 22:45:02 14028 sshd[19136]: Failed password for root from 198.199.98.117 port 32889 ssh2 Apr 23 22:49:37 14028 sshd[19443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 22:49:39 14028 sshd[19443]: Failed password for root from 104.28.217.212 port 53806 ssh2 IP Addresses Blocked: 104.28.249.212 (KR/South Korea/-) 198.199.98.117 (US/United States/-) show less	Brute-Force SSH
🇺🇸 Henriks9	2023-04-24 02:47:35 (3 years ago)	Apr 24 04:37:53 vmd109304 sshd[172572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Apr 24 04:37:53 vmd109304 sshd[172572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 24 04:37:55 vmd109304 sshd[172572]: Failed password for root from 104.28.217.212 port 29748 ssh2 Apr 24 04:47:31 vmd109304 sshd[172754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 24 04:47:33 vmd109304 sshd[172754]: Failed password for root from 104.28.217.212 port 18422 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-24 02:21:18 (3 years ago)	104.28.217.212 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ... show more 104.28.217.212 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 23 21:21:03 15885 sshd[15018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 21:18:54 15885 sshd[14834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.142 user=root Apr 23 21:18:56 15885 sshd[14834]: Failed password for root from 138.197.200.142 port 34616 ssh2 Apr 23 21:20:45 15885 sshd[14966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.142 user=root Apr 23 21:20:48 15885 sshd[14966]: Failed password for root from 138.197.200.142 port 59154 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇨🇿 lp	2023-04-24 01:42:19 (3 years ago)	SSH brute force: 6 attempts were recorded from 104.28.217.212 2023-04-24T03:29:53.090690+02:00 from ... show more SSH brute force: 6 attempts were recorded from 104.28.217.212 2023-04-24T03:29:53.090690+02:00 from authenticating user root 104.28.217.212 port 11620 [preauth] 2023-04-24T03:37:12.774323+02:00 from authenticating user root 104.28.217.212 port 19528 [preauth] 2023-04-24T03:39:46.634358+02:00 from 104.28.217.212 port 11573 on <redacted> port 22 rdomain "" 2023-04-24T03:39:47.183504+02:00 closed by 104.28.217.212 port 11573 [preauth] 2023-04-24T03:42:07.968081+02:00 from 104.28.217.212 port 27563 on <redacted> port 22 rdomain "" 2023-04-24T03:42:09.485418+02:00 user jenkins from 104.28.217.212 port 27563 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-24 01:07:00 (3 years ago)	(sshd) Failed SSH login from 104.28.217.212 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 104.28.217.212 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 23 19:56:45 14036 sshd[12274]: Invalid user altair from 104.28.217.212 port 27400 Apr 23 19:56:47 14036 sshd[12274]: Failed password for invalid user altair from 104.28.217.212 port 27400 ssh2 Apr 23 20:04:31 14036 sshd[12962]: Invalid user user1 from 104.28.217.212 port 24669 Apr 23 20:04:33 14036 sshd[12962]: Failed password for invalid user user1 from 104.28.217.212 port 24669 ssh2 Apr 23 20:06:56 14036 sshd[13119]: Invalid user data from 104.28.217.212 port 11711 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-23 22:21:58 (3 years ago)	(sshd) Failed SSH login from 104.28.217.212 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 104.28.217.212 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 23 17:14:28 15690 sshd[1221]: Invalid user Administrator from 104.28.217.212 port 11455 Apr 23 17:14:30 15690 sshd[1221]: Failed password for invalid user Administrator from 104.28.217.212 port 11455 ssh2 Apr 23 17:17:03 15690 sshd[1430]: Invalid user lxy from 104.28.217.212 port 55393 Apr 23 17:17:05 15690 sshd[1430]: Failed password for invalid user lxy from 104.28.217.212 port 55393 ssh2 Apr 23 17:21:48 15690 sshd[1688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root show less	Brute-Force SSH
🇩🇪 blackpanther	2023-04-23 21:11:50 (3 years ago)	2023-04-23T22:59:32.669767 sshd[3515554]: Disconnected from authenticating user root 104.28.217.212 ... show more 2023-04-23T22:59:32.669767 sshd[3515554]: Disconnected from authenticating user root 104.28.217.212 port 11503 [preauth] 2023-04-23T23:09:21.469601 sshd[3521650]: Disconnected from authenticating user root 104.28.217.212 port 12403 [preauth] 2023-04-23T23:11:49.866811 sshd[3523240]: Disconnected from authenticating user root 104.28.217.212 port 27635 [preauth] show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-23 20:57:55 (3 years ago)	104.28.217.212 (KR/South Korea/-), 6 distributed sshd attacks on account [root] in the last 3600 sec ... show more 104.28.217.212 (KR/South Korea/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 23 15:57:52 16988 sshd[5772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 15:42:57 16988 sshd[5110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.249.212 user=root Apr 23 15:42:59 16988 sshd[5110]: Failed password for root from 104.28.249.212 port 56824 ssh2 Apr 23 15:50:35 16988 sshd[5449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.249.212 user=root Apr 23 15:50:38 16988 sshd[5449]: Failed password for root from 104.28.249.212 port 60221 ssh2 Apr 23 15:53:01 16988 sshd[5529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.249.212 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-23 19:39:34 (3 years ago)	(sshd) Failed SSH login from 104.28.217.212 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 104.28.217.212 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 23 14:34:32 18927 sshd[2287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 14:34:34 18927 sshd[2287]: Failed password for root from 104.28.217.212 port 27311 ssh2 Apr 23 14:36:55 18927 sshd[2439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 14:36:57 18927 sshd[2439]: Failed password for root from 104.28.217.212 port 27336 ssh2 Apr 23 14:39:25 18927 sshd[2633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root show less	Brute-Force SSH
🇵🇹 portal.programacao.org	2023-04-23 18:20:03 (3 years ago)	SSH-BRUTE-FORCE	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-23 18:15:34 (3 years ago)	104.28.217.212 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ... show more 104.28.217.212 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 23 13:15:28 17876 sshd[31705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.249.212 user=root Apr 23 13:11:07 17876 sshd[31513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 13:11:09 17876 sshd[31513]: Failed password for root from 104.28.217.212 port 29851 ssh2 Apr 23 13:07:00 17876 sshd[31302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 13:07:02 17876 sshd[31302]: Failed password for root from 104.28.217.212 port 37588 ssh2 IP Addresses Blocked: 104.28.249.212 (KR/South Korea/-) show less	Brute-Force SSH
🇩🇪 Vitali Graf	2023-04-23 16:35:11 (3 years ago)	Invalid user redis from 104.28.217.212 port 22076	Brute-Force SSH
🇨🇭 Xenic	2023-04-23 14:12:09 (3 years ago)	Apr 23 16:12:05 zurich-2 sshd[114399]: Invalid user dkhcdndnswh from 104.28.217.212 port 11790 Apr 2 ... show more Apr 23 16:12:05 zurich-2 sshd[114399]: Invalid user dkhcdndnswh from 104.28.217.212 port 11790 Apr 23 16:12:05 zurich-2 sshd[114399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 Apr 23 16:12:08 zurich-2 sshd[114399]: Failed password for invalid user dkhcdndnswh from 104.28.217.212 port 11790 ssh2 ... show less	Brute-Force SSH
🇩🇪 dwmp	2023-04-23 13:15:47 (3 years ago)	Apr 23 14:37:27 plesk sshd[2425687]: Failed password for root from 104.28.217.212 port 37084 ssh2 Ap ... show more Apr 23 14:37:27 plesk sshd[2425687]: Failed password for root from 104.28.217.212 port 37084 ssh2 Apr 23 15:02:58 plesk sshd[2426766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 15:02:59 plesk sshd[2426766]: Failed password for root from 104.28.217.212 port 60003 ssh2 Apr 23 15:15:44 plesk sshd[2427212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 15:15:46 plesk sshd[2427212]: Failed password for root from 104.28.217.212 port 60314 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-04-23 11:12:53 (3 years ago)	(sshd) Failed SSH login from 104.28.217.212 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 104.28.217.212 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 23 06:00:37 14547 sshd[29182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 06:00:39 14547 sshd[29182]: Failed password for root from 104.28.217.212 port 42747 ssh2 Apr 23 06:10:09 14547 sshd[29817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root Apr 23 06:10:11 14547 sshd[29817]: Failed password for root from 104.28.217.212 port 32455 ssh2 Apr 23 06:12:40 14547 sshd[30019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.217.212 user=root show less	Brute-Force SSH

Showing 106 to 120 of 211 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.168

🇨🇳 220.154.131.255

🇸🇳 196.207.235.46

🇮🇳 157.49.42.235

🇨🇳 123.145.31.3

🇵🇭 119.92.76.210

🇮🇶 87.236.149.65

🇬🇧 51.75.161.33

🇩🇪 43.228.157.9

🇰🇷 39.115.195.164

🇷🇺 37.77.150.67

🇮🇩 36.64.19.254

🇮🇳 210.79.148.239

🇬🇧 193.163.125.153

🇺🇸 192.241.141.178

🇸🇪 185.246.128.152

🇮🇳 152.58.24.22

🇭🇰 152.32.189.59

🇫🇷 62.84.187.219

🇳🇱 45.198.224.5