104.28.253.213

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
72% Elevated
34 reports
18 reporters · latest 8 hours ago
ISP
Cloudflare, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13335
Domain Name
cloudflare.com
Country
🇭🇹 Haiti
City
Port-au-Prince, Ouest
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
34 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 11 🇩🇪 Germany 3 🇳🇱 Netherlands 3
Most common categories Brute-Force 28 Email Spam 4 Hacking 3 Exploited Host 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇰 powerhostingdk
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 104.28.253.213 2026-11-11T02:48:46+0100 warning: unknown[104.28.253.213]: SASL authentication failed
Brute-Force
🇳🇱 maxxsense
(postfix-unknown) Failed postfix unknown login with username [redacted] from 104.28.253.213 (HT/Haiti/-)
Hacking
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 104.28.253.213 2026-11-11T01:11:06+0100 warning: unknown[104.28.253.213]: SASL authentication failed
Brute-Force
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-09 UTC.
Exploited Host
🇫🇷 smtp.com.es
Brute force attempt.
Brute-Force Email Spam
🇮🇹 CoreTech srl
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 104.28.253.213 2026-11-06T22:49:27+0100 warning: unknown[104.28.253.213]: SASL authentication failed
Brute-Force
🇩🇪 ksol-hostmaster
Nov 6 21:17:30 ksol dovecot[89826]: auth-worker(69589): conn unix:auth-worker (uid=143): auth-worker<3>: sql(anonymized@email,104.28.253.213): Password mismatch (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ...
Brute-Force
🇩🇰 powerhostingdk
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 104.28.253.213 2026-11-03T22:03:22+0100 warning: unknown[104.28.253.213]: SASL authentication failed
Brute-Force
🇹🇷 Jova
Repeated failed IMAP+SMTP logins to a mail account (credential guessing).
Brute-Force
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 104.28.253.213 2026-11-02T22:14:03+0100 warning: unknown[104.28.253.213]: SASL authentication failed
Brute-Force
🇹🇭 thaizone.com
Password guessing attack (SM11) #1
Email Spam Brute-Force
🇿🇦 maximonline.co.za
Brute Force SMTP AUTH Attack
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇿 213.230.92.214
🇨🇳 60.222.230.70
🇹🇷 188.132.143.72
🇻🇪 185.226.194.225
🇨🇴 181.49.8.57
🇺🇦 176.120.100.76
🇺🇸 167.99.10.81
🇺🇸 165.232.153.121
🇺🇸 65.49.1.182
🇺🇸 65.49.1.132
🇵🇱 45.138.12.16
🇮🇳 45.112.50.36
🇰🇷 43.155.157.239
🇺🇸 40.124.187.7
🇺🇦 195.138.64.89
🇺🇸 185.191.171.3
🇫🇷 176.31.241.211
🇫🇷 173.249.52.138
🇧🇩 103.41.245.51
🇳🇬 102.88.137.80
feedback