AbuseIPDB » 104.28.238.218
104.28.238.218
This IP was reported 9 times. Confidence of
Abuse
is 45% : ?
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇺🇸
United States of America
City
Orlando, Florida
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 104.28.238.218 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
104.28.238.218 was first reported on
August 20th 2026 , and the most recent report was
3 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇸🇬
celestialcity
2026-08-23 03:59:13
(3 hours ago)
Blocked by UFW on celestialcityas [8002/tcp] | SPT: 33657 | TTL: 40 | LEN: 60 | TOS: 0x00 • Reported ...
show more
Blocked by UFW on celestialcityas [8002/tcp] | SPT: 33657 | TTL: 40 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇩🇪
iNetWorker
2026-08-23 02:03:00
(5 hours ago)
trying to access non-authorized port
Port Scan
🇫🇮
sonot
2026-08-22 12:12:39
(19 hours ago)
Blocked by UFW on mail [83/tcp] | SPT: 49405 | TTL: 50 | LEN: 60 | TOS: 0x00 • Reported by: github.c ...
show more
Blocked by UFW on mail [83/tcp] | SPT: 49405 | TTL: 50 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇫🇷
Stara
2026-08-21 18:55:46
(1 day ago)
Port scan detected - multiple connection attempts to various ports
Port Scan
Brute-Force
SSH
2026-08-21 06:30:08
(2 days ago)
Triggered: repeated knocking on closed ports.
Port Scan
🇫🇷
sthoyer.de
2026-08-21 05:41:58
(2 days ago)
Aug 21 07:41:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ...
show more
Aug 21 07:41:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.238.218 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=16615 DF PROTO=TCP SPT=9724 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0
Aug 21 07:41:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.238.218 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=16616 DF PROTO=TCP SPT=9724 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0
Aug 21 07:41:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.238.218 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=16616 DF PROTO=TCP SPT=9724 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0
Aug 21 07:41:57 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.238.218 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=16617 DF PROTO=TCP SPT=9724 DPT=81 WINDOW=65535 R
...
show less
Port Scan
🇩🇪
reznekcs
2026-08-21 05:00:28
(2 days ago)
Blocked by UFW firewall
Brute-Force
🇩🇪
iNetWorker
2026-08-20 20:46:24
(2 days ago)
trying to access non-authorized port
Port Scan
🇫🇷
sthoyer.de
2026-08-20 16:09:51
(2 days ago)
Aug 20 18:09:47 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ...
show more
Aug 20 18:09:47 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.238.218 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=1526 DF PROTO=TCP SPT=21059 DPT=82 WINDOW=65535 RES=0x00 SYN URGP=0
Aug 20 18:09:48 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.238.218 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=1527 DF PROTO=TCP SPT=21059 DPT=82 WINDOW=65535 RES=0x00 SYN URGP=0
Aug 20 18:09:49 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.238.218 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=1528 DF PROTO=TCP SPT=21059 DPT=82 WINDOW=65535 RES=0x00 SYN URGP=0
Aug 20 18:09:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.28.238.218 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=1529 DF PROTO=TCP SPT=21059 DPT=82 WINDOW=65535 R
...
show less
Port Scan
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: