JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.28.228.167

Activity Trending Down

Abuse confidence score ?

11% Caution

23 reports

18 reporters · latest 1 month ago

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇫🇮 Finland
City	Vantaa, Uusimaa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.28.228.167

This IP address has been reported a total of 23 times from 18 distinct sources. 104.28.228.167 was first reported on June 11th 2024, and the most recent report was 1 month ago. In the last 60 days, the top reporter locations were: India with 1 report; Italy with 1 report; Netherlands with 1 report. The most common categories in these recent reports were: DDoS Attack 1 time; Hacking 1 time; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 maxxsense	2026-08-05 22:29:51 (1 month ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 104.28.228.167 (FI/Finl ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 104.28.228.167 (FI/Finland/-) show less	Hacking
🇮🇹 VHosting	2026-08-03 23:20:03 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇳 liveaspankaj	2026-08-03 21:52:39 (1 month ago)	DDoS attack: 670 requests in 5m (GET / or repair.php).	DDoS Attack
🇫🇷 GabrielJST	2024-07-09 05:25:57 (2 years ago)	(PERMBLOCK) 104.28.228.167 (FI/Finland/-) has had more than 1 temp blocks	Hacking
🇬🇧 G4zabus3r	2024-07-08 11:18:37 (2 years ago)	Port Scan detected from 104.28.228.167 (FI/Finland/-).	Port Scan
Anonymous	2024-07-08 08:50:47 (2 years ago)	Port Scan detected from 104.28.228.167 (FI/Finland/-). 11 hits in the last 168 seconds; Ports: ; ... show more Port Scan* detected from 104.28.228.167 (FI/Finland/-). 11 hits in the last 168 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT show less	Brute-Force
🇫🇷 GabrielJST	2024-07-08 02:25:46 (2 years ago)	Port Scan detected from 104.28.228.167 (FI/Finland/-).	Port Scan
Anonymous	2024-07-07 22:10:41 (2 years ago)	Port Scan detected from 104.28.228.167 (FI/Finland/-). 11 hits in the last 35 seconds; Ports: ; D ... show more Port Scan* detected from 104.28.228.167 (FI/Finland/-). 11 hits in the last 35 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT show less	Brute-Force
🇩🇪 ISPLtd	2024-07-04 09:55:34 (2 years ago)	Jul 4 06:55:32 SRC=104.28.228.167 PROTO=TCP SPT=40292 DPT=5000 SYN Jul 4 06:55:33 SRC=104.28.228.1 ... show more Jul 4 06:55:32 SRC=104.28.228.167 PROTO=TCP SPT=40292 DPT=5000 SYN Jul 4 06:55:33 SRC=104.28.228.167 PROTO=TCP SPT=40292 DPT=5000 SYN Jul 4 06:55:34 SRC=104.28.228.167 PROTO=TCP SPT=40292 DPT=5000 ... show less	Port Scan
Anonymous	2024-07-04 07:30:04 (2 years ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇭🇰 sthoyer.de	2024-07-04 06:51:44 (2 years ago)	Jul 4 08:51:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d: ... show more Jul 4 08:51:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=104.28.228.167 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=35968 DF PROTO=TCP SPT=57759 DPT=5000 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 4 08:51:40 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=104.28.228.167 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=35969 DF PROTO=TCP SPT=57759 DPT=5000 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 4 08:51:41 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=104.28.228.167 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=35970 DF PROTO=TCP SPT=57759 DPT=5000 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 4 08:51:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=104.28.228.167 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=35971 DF PROTO=TCP SPT=57759 DPT=5000 WI ... show less	Port Scan
🇭🇰 Little Iguana	2024-07-04 06:51:36 (2 years ago)	trying to access non-authorized port	Port Scan
🇩🇪 host.tugatech.com.pt	2024-07-04 05:46:48 (2 years ago)	Port Scan detected from 104.28.228.167 (US/United States/-). 6 hits in the last 10 seconds	Port Scan Brute-Force
🇬🇧 ISPLtd	2024-07-04 00:35:28 (2 years ago)	Jul 3 21:35:23 SRC=104.28.228.167 PROTO=TCP SPT=14888 DPT=5000 SYN Jul 3 21:35:24 SRC=104.28.228.1 ... show more Jul 3 21:35:23 SRC=104.28.228.167 PROTO=TCP SPT=14888 DPT=5000 SYN Jul 3 21:35:24 SRC=104.28.228.167 PROTO=TCP SPT=14888 DPT=5000 SYN Jul 3 21:35:25 SRC=104.28.228.167 PROTO=TCP SPT=14888 DPT=5000 ... show less	Port Scan
🇩🇪 ISPLtd	2024-07-03 22:38:03 (2 years ago)	Jul 3 15:38:01 SRC=104.28.228.167 PROTO=TCP SPT=15777 DPT=5000 SYN Jul 3 15:38:02 SRC=104.28.228.1 ... show more Jul 3 15:38:01 SRC=104.28.228.167 PROTO=TCP SPT=15777 DPT=5000 SYN Jul 3 15:38:02 SRC=104.28.228.167 PROTO=TCP SPT=15777 DPT=5000 SYN Jul 3 15:38:03 SRC=104.28.228.167 PROTO=TCP SPT=15777 DPT=5000 ... show less	Port Scan

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.240

🇪🇹 196.190.80.124

🇩🇪 158.94.208.232

🇻🇳 103.179.173.70

🇵🇱 94.26.88.12

🇷🇴 92.118.39.14

🇺🇦 91.236.224.37

🇳🇱 87.58.206.113

🇺🇸 70.183.230.204

🇦🇺 34.40.235.187

🇷🇺 31.184.195.248

🇬🇧 2a06:4880:6000::85

🇺🇸 185.241.211.157

🇺🇸 104.236.68.24

🇱🇾 102.203.197.6

🇷🇴 89.33.93.7

🇳🇱 68.183.3.91

🇨🇳 59.37.13.66

🇲🇿 41.94.111.190

🇱🇺 36.255.97.232