JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.247.11

104.28.247.11 was found in our database!

This IP was reported 605 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇱🇺 Luxembourg
City	Luxembourg, Luxembourg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.247.11

Whois 104.28.247.11

IP Abuse Reports for 104.28.247.11:

This IP address has been reported a total of 605 times from 275 distinct sources. 104.28.247.11 was first reported on June 1st 2023, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Packets-Decreaser.NET	2025-10-14 21:57:40 (11 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2024-03-05 21:43:59 (2 years ago)	2024-03-05T15:43:56.028289-06:00 ecybernard.com dovecot[2717]: auth-worker(26533): conn unix:auth-wo ... show more 2024-03-05T15:43:56.028289-06:00 ecybernard.com dovecot[2717]: auth-worker(26533): conn unix:auth-worker (pid=22976,uid=472): auth-worker<1>: shadow(bought,104.28.247.11,<BMIzvfASXyloHPcL>): Password mismatch 2024-03-05T15:43:58.259548-06:00 ecybernard.com dovecot[2717]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<bought>, method=PLAIN, rip=104.28.247.11, lip=192.168.2.2, TLS: Connection closed ... show less	Brute-Force
Anonymous	2024-01-23 11:20:00 (2 years ago)	Spam-Bot-Netz kompromittiertes Postfach	Exploited Host
Anonymous	2024-01-23 11:20:00 (2 years ago)	Spam-Bot-Netz kompromittiertes Postfach	Exploited Host
🇨🇿 lp	2024-01-19 14:53:21 (2 years ago)	Email account brute force: 2 attempts were recorded from 104.28.247.11 2024-01-19T14:28:21+01:00 war ... show more Email account brute force: 2 attempts were recorded from 104.28.247.11 2024-01-19T14:28:21+01:00 warning: unknown[104.28.247.11]: SASL LOGIN authentication failed: authentication failure, [email protected] 2024-01-19T14:28:21+01:00 warning: unknown[104.28.247.11]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2023-07-06 11:38:35 (3 years ago)	B: f2b ssh aggressive 3x	Brute-Force SSH
🇫🇷 Ruman	2023-06-19 21:08:59 (3 years ago)	2023-06-14 01:01:40,278 fail2ban.actions [218]: NOTICE [pam-generic] Ban 104.28.247.11 2023- ... show more 2023-06-14 01:01:40,278 fail2ban.actions [218]: NOTICE [pam-generic] Ban 104.28.247.11 2023-06-14 01:01:42,212 fail2ban.actions [218]: NOTICE [sshd] Ban 104.28.247.11 show less	Web Spam Hacking Brute-Force Bad Web Bot
🇫🇷 Ruman	2023-06-15 20:40:24 (3 years ago)	2023-06-14 01:01:40,278 fail2ban.actions [218]: NOTICE [pam-generic] Ban 104.28.247.11 2023- ... show more 2023-06-14 01:01:40,278 fail2ban.actions [218]: NOTICE [pam-generic] Ban 104.28.247.11 2023-06-14 01:01:42,212 fail2ban.actions [218]: NOTICE [sshd] Ban 104.28.247.11 show less	Web Spam Hacking Brute-Force Bad Web Bot
🇩🇪 limo	2023-06-15 05:55:43 (3 years ago)	Jun 15 07:50:01 vps-de sshd[2287838]: Failed password for invalid user ay from 104.28.247.11 port 61 ... show more Jun 15 07:50:01 vps-de sshd[2287838]: Failed password for invalid user ay from 104.28.247.11 port 61390 ssh2 Jun 15 07:51:54 vps-de sshd[2287857]: User root from 104.28.247.11 not allowed because not listed in AllowUsers Jun 15 07:51:54 vps-de sshd[2287857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.247.11 user=root Jun 15 07:51:55 vps-de sshd[2287857]: Failed password for invalid user root from 104.28.247.11 port 61235 ssh2 Jun 15 07:53:48 vps-de sshd[2287904]: Invalid user cz from 104.28.247.11 port 61018 Jun 15 07:53:48 vps-de sshd[2287904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.247.11 Jun 15 07:53:50 vps-de sshd[2287904]: Failed password for invalid user cz from 104.28.247.11 port 61018 ssh2 Jun 15 07:55:40 vps-de sshd[2287929]: Invalid user wocloud from 104.28.247.11 port 61217 Jun 15 07:55:40 vps-de sshd[2287929]: pam_unix(sshd:auth): authentication failure; logname= ui ... show less	Brute-Force SSH
🇩🇪 limo	2023-06-15 05:16:41 (3 years ago)	Jun 15 07:12:02 vps-de sshd[2287346]: Failed password for invalid user root from 104.28.247.11 port ... show more Jun 15 07:12:02 vps-de sshd[2287346]: Failed password for invalid user root from 104.28.247.11 port 61045 ssh2 Jun 15 07:13:31 vps-de sshd[2287381]: Invalid user founder from 104.28.247.11 port 61208 Jun 15 07:13:31 vps-de sshd[2287381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.247.11 Jun 15 07:13:33 vps-de sshd[2287381]: Failed password for invalid user founder from 104.28.247.11 port 61208 ssh2 Jun 15 07:15:04 vps-de sshd[2287427]: Invalid user hyh from 104.28.247.11 port 61299 Jun 15 07:15:04 vps-de sshd[2287427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.247.11 Jun 15 07:15:06 vps-de sshd[2287427]: Failed password for invalid user hyh from 104.28.247.11 port 61299 ssh2 Jun 15 07:16:38 vps-de sshd[2287500]: Invalid user ubuntu from 104.28.247.11 port 61076 Jun 15 07:16:38 vps-de sshd[2287500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2023-06-15 05:12:31 (3 years ago)	Jun 15 07:04:41 router01.dreibaeumen.de sshd[84985]: Invalid user airdamin from 104.28.247.11 port 6 ... show more Jun 15 07:04:41 router01.dreibaeumen.de sshd[84985]: Invalid user airdamin from 104.28.247.11 port 61023 Jun 15 07:04:41 router01.dreibaeumen.de sshd[84985]: Disconnected from invalid user airdamin 104.28.247.11 port 61023 [preauth] Jun 15 07:10:59 router01.dreibaeumen.de sshd[85688]: Disconnected from authenticating user root 104.28.247.11 port 61293 [preauth] Jun 15 07:12:30 router01.dreibaeumen.de sshd[86070]: Invalid user founder from 104.28.247.11 port 61154 Jun 15 07:12:30 router01.dreibaeumen.de sshd[86070]: Disconnected from invalid user founder 104.28.247.11 port 61154 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-06-15 05:12:31 (3 years ago)	Jun 15 07:04:41 router01.dreibaeumen.de sshd[84985]: Invalid user airdamin from 104.28.247.11 port 6 ... show more Jun 15 07:04:41 router01.dreibaeumen.de sshd[84985]: Invalid user airdamin from 104.28.247.11 port 61023 Jun 15 07:04:41 router01.dreibaeumen.de sshd[84985]: Disconnected from invalid user airdamin 104.28.247.11 port 61023 [preauth] Jun 15 07:10:59 router01.dreibaeumen.de sshd[85688]: Disconnected from authenticating user root 104.28.247.11 port 61293 [preauth] Jun 15 07:12:30 router01.dreibaeumen.de sshd[86070]: Invalid user founder from 104.28.247.11 port 61154 Jun 15 07:12:30 router01.dreibaeumen.de sshd[86070]: Disconnected from invalid user founder 104.28.247.11 port 61154 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-06-15 05:12:31 (3 years ago)	Jun 15 07:04:41 router01.dreibaeumen.de sshd[84985]: Invalid user airdamin from 104.28.247.11 port 6 ... show more Jun 15 07:04:41 router01.dreibaeumen.de sshd[84985]: Invalid user airdamin from 104.28.247.11 port 61023 Jun 15 07:04:41 router01.dreibaeumen.de sshd[84985]: Disconnected from invalid user airdamin 104.28.247.11 port 61023 [preauth] Jun 15 07:10:59 router01.dreibaeumen.de sshd[85688]: Disconnected from authenticating user root 104.28.247.11 port 61293 [preauth] Jun 15 07:12:30 router01.dreibaeumen.de sshd[86070]: Invalid user founder from 104.28.247.11 port 61154 Jun 15 07:12:30 router01.dreibaeumen.de sshd[86070]: Disconnected from invalid user founder 104.28.247.11 port 61154 [preauth] show less	Brute-Force
Anonymous	2023-06-15 05:11:33 (3 years ago)	prod11 ...	Brute-Force SSH
🇩🇪 ps-center	2023-06-15 04:17:27 (3 years ago)	DIS: Brutforce ssh Login	Brute-Force

Showing 1 to 15 of 605 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.187.176.249

🇺🇸 174.168.200.105

🇺🇸 136.109.165.65

🇳🇱 130.12.180.174

🇲🇽 189.203.95.199

🇲🇽 186.96.158.180

🇸🇬 103.250.11.156

🇳🇱 45.148.10.141

🇸🇬 168.144.138.26

🇨🇳 121.40.43.133

🇺🇸 65.49.1.206

🇰🇷 59.16.212.232

🇺🇸 173.237.46.177

🇮🇩 163.7.8.79

🇵🇱 130.49.215.84

🇧🇩 103.171.69.185

🇺🇸 66.132.186.250

🇸🇬 47.128.118.85

🇳🇱 45.148.10.151

🇺🇸 20.106.212.228