JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.237.122

104.28.237.122 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 86%: ?

86%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Gainesville, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.237.122

Whois 104.28.237.122

IP Abuse Reports for 104.28.237.122:

This IP address has been reported a total of 47 times from 20 distinct sources. 104.28.237.122 was first reported on May 8th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-09-17 04:33:56 (16 hours ago)	Connection to port 8008 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:8008 ... show more Connection to port 8008 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:8008 User-Agent: Mozilla/5.0 (compatible; SecurityScanner/1.0) show less	Port Scan Hacking
Anonymous	2026-09-17 04:30:06 (16 hours ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇳🇱 hxsain	2026-09-17 03:59:35 (17 hours ago)	Blocked by UFW [3000/tcp] \| SPT: 41259 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [3000/tcp] \| SPT: 41259 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 sthoyer.de	2026-09-17 03:25:23 (17 hours ago)	Sep 17 05:25:20 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Sep 17 05:25:20 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.122 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=56996 DF PROTO=TCP SPT=62453 DPT=9443 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 17 05:25:21 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.122 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=56997 DF PROTO=TCP SPT=62453 DPT=9443 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 17 05:25:21 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.122 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=56997 DF PROTO=TCP SPT=62453 DPT=9443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 iNetWorker	2026-09-16 19:09:17 (1 day ago)	trying to access non-authorized port	Port Scan
🇫🇮 anycast_ac	2026-09-16 18:12:20 (1 day ago)	Blocked by UFW on legacypanel [8086/tcp] \| SPT: 32974 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on legacypanel [8086/tcp] \| SPT: 32974 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: FemboyHolding LTD show less	Port Scan
🇺🇸 donarev419	2026-09-16 14:58:07 (1 day ago)	Connection to port 8091 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:8091 ... show more Connection to port 8091 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:8091 User-Agent: Mozilla/5.0 (compatible; SecurityScanner/1.0) show less	Port Scan Hacking
🇮🇪 wiredalter	2026-09-16 14:56:50 (1 day ago)	Blocked by UFW on vhVPS [81/tcp] Source Port: 28788 TTL: 52 Packet Length: 60 TOS: 0x00 Analyzed by ... show more Blocked by UFW on vhVPS [81/tcp] Source Port: 28788 TTL: 52 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇫🇷 EvoX	2026-09-16 14:15:54 (1 day ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 9001 GET / User-Agent: Mozilla/5.0 (compatible; ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 9001 GET / User-Agent: Mozilla/5.0 (compatible; SecurityScanner/1.0) Accept: / Accept-Encoding: gzip, deflate; 9001 [1] TCP show less	Hacking Bad Web Bot
🇵🇱 nfsec.pl	2026-09-16 07:57:05 (1 day ago)	Detected: TCP scan on port: 5900 with flags: SYN	Port Scan
🇩🇪 reznekcs	2026-09-16 05:00:17 (1 day ago)	Blocked by UFW firewall	Brute-Force
🇫🇷 sthoyer.de	2026-09-15 13:53:38 (2 days ago)	Sep 15 15:53:34 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Sep 15 15:53:34 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.122 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8084 DF PROTO=TCP SPT=40182 DPT=8008 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 15 15:53:35 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.122 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8085 DF PROTO=TCP SPT=40182 DPT=8008 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 15 15:53:35 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.122 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8085 DF PROTO=TCP SPT=40182 DPT=8008 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 15 15:53:36 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.122 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8086 DF PROTO=TCP SPT=40182 DPT=8008 WINDOW ... show less	Port Scan
🇫🇷 GabrielJST	2026-09-15 07:33:54 (2 days ago)	(PERMBLOCK) 104.28.237.122 (US/United States/-) has had more than 1 temp blocks	Hacking
🇫🇮 sonot	2026-09-15 05:14:59 (2 days ago)	Blocked by UFW on mail [8002/tcp] \| SPT: 62129 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [8002/tcp] \| SPT: 62129 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇪 wiredalter	2026-09-15 00:44:45 (2 days ago)	Blocked by UFW on vhVPS [81/tcp] Source Port: 51057 TTL: 47 Packet Length: 60 TOS: 0x08 Analyzed by ... show more Blocked by UFW on vhVPS [81/tcp] Source Port: 51057 TTL: 47 Packet Length: 60 TOS: 0x08 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.120.100.13

🇰🇷 152.70.239.95

🇺🇸 109.105.210.84

🇮🇳 142.93.220.18

🇸🇮 102.220.161.46

🇮🇷 91.108.145.212

🇺🇸 40.124.186.169

🇩🇪 213.209.159.175

🇺🇸 195.184.76.65

🇳🇱 193.118.52.222

🇩🇪 164.92.247.98

🇫🇷 141.94.94.61

🇦🇺 115.129.89.209

🇩🇪 69.5.169.212

🇩🇪 69.5.169.133

🇨🇳 58.34.174.90

🇳🇱 45.148.10.240

🇬🇧 193.176.29.2

🇧🇩 160.191.115.75

🇨🇳 122.14.226.50