AbuseIPDB » 104.28.238.119

Check an IP Address, Domain Name, or Subnet

e.g. 18.207.133.27, microsoft.com, or 5.188.10.0/24

104.28.238.119 was found in our database!

This IP was reported 408 times. Confidence of Abuse is 0%: ?

ISP	CloudFlare Inc.
Usage Type	Content Delivery Network
Domain Name	cloudflare.com
Country	Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 104.28.238.119 is an IP address from within our whitelist. Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

According to our records, this IP belongs to the subnet 104.16.0.0/12, identified as: "Cloudflare Reverse Proxy"

Report 104.28.238.119

Whois 104.28.238.119

IP Abuse Reports for 104.28.238.119:

This IP address has been reported a total of 408 times from 207 distinct sources. 104.28.238.119 was first reported on April 28th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
ege8	23 Jun 2022		Brute-Force SSH
r$	22 Jun 2022		Brute-Force SSH
r$	21 Jun 2022		Brute-Force SSH
r$	19 Jun 2022		Brute-Force SSH
r$	17 Jun 2022		Brute-Force SSH
kukki	16 Jun 2022	detected by Fail2Ban	Brute-Force SSH
rnmn	16 Jun 2022	Jun 16 22:22:06 gerbil-server sshd[173527]: Invalid user ark from 104.28.238.119 port 23899 Ju ... show moreJun 16 22:22:06 gerbil-server sshd[173527]: Invalid user ark from 104.28.238.119 port 23899 Jun 16 22:22:06 gerbil-server sshd[173527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.238.119 Jun 16 22:22:08 gerbil-server sshd[173527]: Failed password for invalid user ark from 104.28.238.119 port 23899 ssh2 Jun 16 22:22:09 gerbil-server sshd[173527]: Disconnected from invalid user ark 104.28.238.119 port 23899 [preauth] Jun 16 22:26:10 gerbil-server sshd[175526]: Invalid user webuser from 104.28.238.119 port 23872 ... show less	Brute-Force SSH
rnmn	16 Jun 2022	Jun 16 21:55:16 gerbil-server sshd[162863]: Failed password for invalid user demo from 104.28.238.11 ... show moreJun 16 21:55:16 gerbil-server sshd[162863]: Failed password for invalid user demo from 104.28.238.119 port 23943 ssh2 Jun 16 21:55:17 gerbil-server sshd[162863]: Disconnected from invalid user demo 104.28.238.119 port 23943 [preauth] Jun 16 22:01:29 gerbil-server sshd[165550]: Invalid user admin from 104.28.238.119 port 50724 Jun 16 22:01:29 gerbil-server sshd[165550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.238.119 Jun 16 22:01:32 gerbil-server sshd[165550]: Failed password for invalid user admin from 104.28.238.119 port 50724 ssh2 ... show less	Brute-Force SSH
Teknikal_Domain	16 Jun 2022	Jun 16 15:30:49 gen sshd[15270]: Invalid user dora from 104.28.238.119 port 23768 Jun 16 15:30 ... show moreJun 16 15:30:49 gen sshd[15270]: Invalid user dora from 104.28.238.119 port 23768 Jun 16 15:30:51 gen sshd[15270]: Failed password for invalid user dora from 104.28.238.119 port 23768 ssh2 Jun 16 15:47:14 gen sshd[15498]: Invalid user farmacia from 104.28.238.119 port 23934 ... show less	Brute-Force SSH
rnmn	16 Jun 2022	Jun 16 21:36:31 gerbil-server sshd[155448]: Failed password for invalid user musikbot from 104.28.23 ... show moreJun 16 21:36:31 gerbil-server sshd[155448]: Failed password for invalid user musikbot from 104.28.238.119 port 23853 ssh2 Jun 16 21:36:33 gerbil-server sshd[155448]: Disconnected from invalid user musikbot 104.28.238.119 port 23853 [preauth] Jun 16 21:38:41 gerbil-server sshd[156262]: Invalid user ai from 104.28.238.119 port 23657 Jun 16 21:38:41 gerbil-server sshd[156262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.238.119 Jun 16 21:38:43 gerbil-server sshd[156262]: Failed password for invalid user ai from 104.28.238.119 port 23657 ssh2 ... show less	Brute-Force SSH
nextweb	16 Jun 2022	(sshd) Failed SSH login from 104.28.238.119 (JP/Japan/Ōsaka/Osaka/-/[AS13335 CLOUDFLARENET]): 2 in ... show more(sshd) Failed SSH login from 104.28.238.119 (JP/Japan/Ōsaka/Osaka/-/[AS13335 CLOUDFLARENET]): 2 in the last 3600 secs show less	Brute-Force SSH
pr0vieh	16 Jun 2022	Jun 16 16:52:59 Linux11 sshd[2694025]: Failed password for invalid user application from 104.28.238. ... show moreJun 16 16:52:59 Linux11 sshd[2694025]: Failed password for invalid user application from 104.28.238.119 port 23868 ssh2 Jun 16 16:59:20 Linux11 sshd[2720687]: Invalid user test101 from 104.28.238.119 port 23951 Jun 16 16:59:20 Linux11 sshd[2720687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.238.119 Jun 16 16:59:22 Linux11 sshd[2720687]: Failed password for invalid user test101 from 104.28.238.119 port 23951 ssh2 Jun 16 17:01:26 Linux11 sshd[2729460]: Invalid user manager from 104.28.238.119 port 23651 Jun 16 17:01:26 Linux11 sshd[2729460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.238.119 Jun 16 17:01:29 Linux11 sshd[2729460]: Failed password for invalid user manager from 104.28.238.119 port 23651 ssh2 Jun 16 17:20:20 Linux11 sshd[2810076]: Invalid user happy from 104.28.238.119 port 23631 Jun 16 17:20:20 Linux11 sshd[2810076]: pam_unix(sshd:auth): authentication failure; logname ... show less	Brute-Force SSH
Rousse Nicolas	16 Jun 2022	Jun 16 16:57:16 srv-web sshd[70985]: Invalid user acc from 104.28.238.119 port 23574 Jun 16 16 ... show moreJun 16 16:57:16 srv-web sshd[70985]: Invalid user acc from 104.28.238.119 port 23574 Jun 16 16:57:16 srv-web sshd[70985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.238.119 Jun 16 16:57:16 srv-web sshd[70985]: Invalid user acc from 104.28.238.119 port 23574 Jun 16 16:57:18 srv-web sshd[70985]: Failed password for invalid user acc from 104.28.238.119 port 23574 ssh2 Jun 16 16:59:19 srv-web sshd[71134]: Invalid user test101 from 104.28.238.119 port 24020 ... show less	Brute-Force SSH
Anonymous	16 Jun 2022	$f2bV_matches	Brute-Force SSH
joschuak	16 Jun 2022	SSH brute force attack detected from [104.28.238.119]	Brute-Force SSH