JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.239.59

104.28.239.59 was found in our database!

This IP was reported 316 times. Confidence of Abuse is 13%: ?

13%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇰🇷 Korea (the Republic of)
City	Tongjin, Gyeonggi-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.239.59

Whois 104.28.239.59

IP Abuse Reports for 104.28.239.59:

This IP address has been reported a total of 316 times from 138 distinct sources. 104.28.239.59 was first reported on March 24th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-05-26 19:20:20 (1 week ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 bigscoots.com	2026-05-26 17:15:55 (1 week ago)	104.28.239.59 (CZ/Czechia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more 104.28.239.59 (CZ/Czechia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 26 11:34:17 15219 sshd[31237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.71.254.235 user=root May 26 11:34:19 15219 sshd[31237]: Failed password for root from 20.71.254.235 port 51008 ssh2 May 26 12:15:35 15219 sshd[3153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.59 user=root May 26 11:35:03 15219 sshd[31340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.71.254.235 user=root May 26 11:30:29 15219 sshd[30834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.71.254.235 user=root May 26 11:30:32 15219 sshd[30834]: Failed password for root from 20.71.254.235 port 42210 ssh2 IP Addresses Blocked: 20.71.254.235 (NL/The Netherlands/-) show less	Brute-Force SSH
Anonymous	2025-07-02 12:33:02 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-05-27 11:33:17 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇷🇴 abuse_IP_reporter	2024-12-09 13:00:37 (1 year ago)	ddosattackagainspublicwebpagewithrandomstrings	DDoS Attack
🇷🇴 abuse_IP_reporter	2024-12-09 13:00:37 (1 year ago)	ddosattackagainspublicwebpagewithrandomstrings	DDoS Attack
🇷🇴 abuse_IP_reporter	2024-12-09 13:00:37 (1 year ago)	ddosattackagainspublicwebpagewithrandomstrings	DDoS Attack
🇬🇧 David Gebler	2024-09-15 18:52:26 (1 year ago)	104.28.239.59 - - [15/Sep/2024:18:52:26 +0000] "POST /wp-content/plugins/wp-automatic/inc/csv.php HT ... show more 104.28.239.59 - - [15/Sep/2024:18:52:26 +0000] "POST /wp-content/plugins/wp-automatic/inc/csv.php HTTP/1.1" 403 4527 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇩🇪 psauxit	2024-07-23 11:51:37 (1 year ago)	Fail2Ban - SSHD brute-force SSH server	SSH
🇬🇧 Dario MB	2024-07-17 14:21:16 (1 year ago)	Jul 17 15:20:02 vmi1756752 sshd[923854]: Invalid user centos from 104.28.239.59 port 22410 Jul 17 15 ... show more Jul 17 15:20:02 vmi1756752 sshd[923854]: Invalid user centos from 104.28.239.59 port 22410 Jul 17 15:20:02 vmi1756752 sshd[923854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.59 Jul 17 15:20:04 vmi1756752 sshd[923854]: Failed password for invalid user centos from 104.28.239.59 port 22410 ssh2 Jul 17 15:21:14 vmi1756752 sshd[924145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.59 user=root Jul 17 15:21:16 vmi1756752 sshd[924145]: Failed password for root from 104.28.239.59 port 42698 ssh2 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2024-07-17 13:36:09 (1 year ago)	Jul 17 07:36:07 b146-18 sshd[2824632]: Invalid user ubuntu from 104.28.239.59 port 19087 Jul 17 07:3 ... show more Jul 17 07:36:07 b146-18 sshd[2824632]: Invalid user ubuntu from 104.28.239.59 port 19087 Jul 17 07:36:07 b146-18 sshd[2824632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.59 Jul 17 07:36:09 b146-18 sshd[2824632]: Failed password for invalid user ubuntu from 104.28.239.59 port 19087 ssh2 ... show less	Brute-Force SSH
🇪🇸 saima	2024-07-15 22:00:04 (1 year ago)	Detected 70 times. SSH Brute-Force from address 104.28.239.59	Brute-Force SSH
🇺🇸 troublesome	2024-07-15 11:29:59 (1 year ago)		Brute-Force SSH
🇩🇪 psauxit	2024-07-15 11:26:40 (1 year ago)	Fail2Ban - SSHD brute-force SSH server	SSH
🇳🇱 Savvii	2024-07-15 10:58:28 (1 year ago)	20 attempts against mh-ssh on chico	Brute-Force SSH

Showing 1 to 15 of 316 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.17

🇨🇳 180.76.103.111

🇷🇴 92.118.39.62

🇪🇬 41.36.16.76

🇧🇪 207.175.77.66

🇩🇪 185.242.3.54

🇳🇱 176.65.139.43

🇳🇱 45.148.10.152

🇨🇳 43.143.98.95

🇲🇽 187.226.171.126

🇮🇷 151.233.157.202

🇻🇳 103.17.91.39

🇺🇸 100.50.17.159

🇺🇸 74.125.75.87

🇺🇸 66.187.5.64

🇺🇸 20.169.83.101

🇦🇷 190.103.198.11

🇬🇧 178.128.162.125

🇺🇸 104.152.58.233

🇺🇸 66.132.172.213