This IP address has been reported a total of
297
times from
146 distinct
sources.
104.28.239.63 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
(sshd) Failed SSH login from 104.28.239.63 (CZ/Czechia/-): 5 in the last 3600 secs; Ports: *; Direct ...
show more(sshd) Failed SSH login from 104.28.239.63 (CZ/Czechia/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 30 12:46:24 14352 sshd[12612]: Did not receive identification string from 104.28.239.63 port 36215
May 30 12:46:31 14352 sshd[12657]: Did not receive identification string from 104.28.239.63 port 36220
May 30 12:47:03 14352 sshd[12658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.63 user=root
May 30 12:47:05 14352 sshd[12658]: Failed password for root from 104.28.239.63 port 36333 ssh2
May 30 12:47:23 14352 sshd[13084]: Did not receive identification string from 104.28.239.63 port 60560
show less
2026-05-30T10:13:39.911372-05:00 kitsunetech.com sshd-session[863579]: User root from 104.28.239.63 ...
show more2026-05-30T10:13:39.911372-05:00 kitsunetech.com sshd-session[863579]: User root from 104.28.239.63 not allowed because not listed in AllowUsers
2026-05-30T10:13:44.344036-05:00 kitsunetech.com sshd-session[863579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.63 user=root
2026-05-30T10:13:46.524661-05:00 kitsunetech.com sshd-session[863579]: Failed password for invalid user root from 104.28.239.63 port 34465 ssh2
...
show less
May 30 07:34:22 servidor sshd[4176194]: Connection closed by authenticating user root 104.28.239.63 ...
show moreMay 30 07:34:22 servidor sshd[4176194]: Connection closed by authenticating user root 104.28.239.63 port 57869 [preauth]
May 30 07:34:53 servidor sshd[4176225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.63 user=root
May 30 07:34:55 servidor sshd[4176225]: Failed password for root from 104.28.239.63 port 33925 ssh2
...
show less
104.28.239.63 (CZ/Czechia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ...
show more104.28.239.63 (CZ/Czechia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 30 06:05:55 14411 sshd[6719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.63 user=root
May 30 06:05:57 14411 sshd[6719]: Failed password for root from 104.28.239.63 port 45877 ssh2
May 30 06:02:04 14411 sshd[5071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.18.100 user=root
May 30 06:02:07 14411 sshd[5071]: Failed password for root from 178.128.18.100 port 43356 ssh2
May 30 06:05:30 14411 sshd[6667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.119.100 user=root
IP Addresses Blocked:
show less
May 30 07:04:20 BCRP sshd[4168444]: Failed password for root from 104.28.239.63 port 25639 ssh2
May ...
show moreMay 30 07:04:20 BCRP sshd[4168444]: Failed password for root from 104.28.239.63 port 25639 ssh2
May 30 07:05:34 BCRP sshd[4171441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.63 user=root
May 30 07:05:37 BCRP sshd[4171441]: Failed password for root from 104.28.239.63 port 63787 ssh2
May 30 07:06:30 BCRP sshd[4173645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.63 user=root
May 30 07:06:32 BCRP sshd[4173645]: Failed password for root from 104.28.239.63 port 29068 ssh2
May 30 07:07:19 BCRP sshd[4175673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.239.63 user=root
May 30 07:07:20 BCRP sshd[4175673]: Failed password for root from 104.28.239.63 port 35192 ssh2
...
show less