JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.237.123

104.28.237.123

Recent Activity

34 reports found in our database

76% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Cloudflare, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS13335

Domain Name

cloudflare.com

Country

🇺🇸 United States of America

City

Gainesville, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.28.237.123:

This IP address has been reported a total of 34 times from 18 distinct sources. 104.28.237.123 was first reported on May 13th 2025, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: France with 11 reports; United States of America with 5 reports; Germany with 3 reports. The most common categories in these recent reports were: Port Scan 24 times; Brute-Force 4 times; Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 sonot	2026-09-12 22:53:39 (1 day ago)	Blocked by UFW on mail [8000/tcp] \| SPT: 32131 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [8000/tcp] \| SPT: 32131 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇪 wiredalter	2026-09-12 20:10:58 (1 day ago)	Blocked by UFW on vhVPS [9001/tcp] Source Port: 63840 TTL: 51 Packet Length: 60 TOS: 0x00 Analyzed ... show more Blocked by UFW on vhVPS [9001/tcp] Source Port: 63840 TTL: 51 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇫🇷 GabrielJST	2026-09-12 11:55:01 (1 day ago)	(PERMBLOCK) 104.28.237.123 (US/United States/-) has had more than 1 temp blocks	Hacking
🇺🇸 shabi	2026-09-12 04:44:17 (2 days ago)	UFW Blocked [8443/TCP] Source: 104.28.237.123:52908 TTL: 54 Lenth: 60 TOS: 0x00	Port Scan
🇫🇷 GabrielJST	2026-09-10 20:28:04 (3 days ago)	Port Scan detected from 104.28.237.123 (US/United States/-).	Port Scan
🇫🇷 vtchost.com	2026-09-10 14:39:23 (3 days ago)	portscan on honeypot system ...	Port Scan
🇫🇷 sthoyer.de	2026-09-07 17:15:56 (6 days ago)	Sep 7 19:15:52 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Sep 7 19:15:52 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=17749 DF PROTO=TCP SPT=31049 DPT=8000 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 7 19:15:53 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=17750 DF PROTO=TCP SPT=31049 DPT=8000 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 7 19:15:53 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=17750 DF PROTO=TCP SPT=31049 DPT=8000 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 7 19:15:54 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=17751 DF PROTO=TCP SPT=31049 DPT=8000 WI ... show less	Port Scan
🇨🇦 Blinker73	2026-09-07 09:10:24 (6 days ago)	2026-09-07T05:10 kernel: OUT= SRC=104.28.237.123 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=64069 DF ... show more 2026-09-07T05:10 kernel: OUT= SRC=104.28.237.123 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=64069 DF PROTO=TCP SPT=22650 DPT=8800 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-07T05:10 kernel: OUT= SRC=104.28.237.123 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=64070 DF PROTO=TCP SPT=22650 DPT=8800 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-07T05:10 kernel: OUT= SRC=104.28.237.123 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=64071 DF PROTO=TCP SPT=22650 DPT=8800 WINDOW=65535 RES=0x00 SYN URGP= show less	Port Scan
🇩🇪 andrepcg	2026-09-07 07:03:04 (1 week ago)	Port scanning (104.28.237.123 -> :8089)	Port Scan Brute-Force
🇩🇪 reznekcs	2026-09-07 05:00:20 (1 week ago)	Blocked by UFW firewall	Brute-Force
🇫🇷 vtchost.com	2026-09-07 03:44:02 (1 week ago)	portscan ...	Port Scan
🇫🇷 peter.pann	2026-09-06 22:30:09 (1 week ago)	Port scan: 10 blocked connection attempts to ports 81,82 (dropped by our geo-firewall).	Port Scan
Anonymous	2026-09-06 14:30:07 (1 week ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 sthoyer.de	2026-09-06 14:28:03 (1 week ago)	Sep 6 16:27:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Sep 6 16:27:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=43122 DF PROTO=TCP SPT=65135 DPT=8084 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 6 16:27:59 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=43123 DF PROTO=TCP SPT=65135 DPT=8084 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 6 16:28:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=43124 DF PROTO=TCP SPT=65135 DPT=8084 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 6 16:28:01 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.237.123 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=43125 DF PROTO=TCP SPT=65135 DPT=8084 WI ... show less	Port Scan
🇬🇧 Axel	2026-09-06 02:51:01 (1 week ago)	Blocked by UFW on BGP1 [8008/tcp] \| SPT: 9873 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on BGP1 [8008/tcp] \| SPT: 9873 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.122

🇬🇧 188.240.59.25

🇺🇸 162.216.150.184

🇸🇬 161.118.217.95

🇭🇰 103.197.71.1

🇨🇦 51.222.85.30

🇧🇷 45.164.41.50

🇹🇷 213.74.41.106

🇧🇷 179.156.108.52

🇲🇾 175.141.199.36

🇺🇸 142.93.73.70

🇧🇩 118.179.212.93

🇧🇬 109.160.32.22

🇪🇸 88.16.227.102

🇫🇷 85.217.140.52

🇦🇷 45.161.132.142

🇳🇱 45.148.10.152

🇭🇰 43.128.3.201

🇧🇪 34.76.85.109

🇧🇩 221.120.99.227