This IP address has been reported a total of
2,593
times from
895 distinct
sources.
104.28.197.13 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 45
reports;
Turkey
with 37
reports;
United States of America
with 18
reports.
The most common categories in these recent reports were:
Web App Attack
155
times;
Hacking
62
times;
Brute-Force
55
times;
Bad Web Bot
42
times;
SSH
24
times;
Other
64
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-20T10:56:16.685438+00:00 24fire sshd-session[159851]: pam_unix(sshd:auth): authentication fa ...
show more2026-10-20T10:56:16.685438+00:00 24fire sshd-session[159851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.197.13
2026-10-20T10:56:18.820040+00:00 24fire sshd-session[159851]: Failed password for invalid user mailcow from 104.28.197.13 port 29301 ssh2
...
show less
2026-10-20T10:39:27.528685+00:00 24fire sshd-session[148873]: pam_unix(sshd:auth): authentication fa ...
show more2026-10-20T10:39:27.528685+00:00 24fire sshd-session[148873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.197.13
2026-10-20T10:39:29.576448+00:00 24fire sshd-session[148873]: Failed password for invalid user admin from 104.28.197.13 port 19003 ssh2
...
show less
2026-10-20T10:22:37.264893+00:00 24fire sshd-session[137697]: Invalid user mailcow from 104.28.197.1 ...
show more2026-10-20T10:22:37.264893+00:00 24fire sshd-session[137697]: Invalid user mailcow from 104.28.197.13 port 58662
2026-10-20T10:22:37.972797+00:00 24fire sshd-session[137700]: Invalid user git from 104.28.197.13 port 58667
...
show less
Observed by a SmarterMail server: helo-signature,auth-failure,reputation (425 matching log lines). N ...
show moreObserved by a SmarterMail server: helo-signature,auth-failure,reputation (425 matching log lines). Non-HTTP protocols only.
show less
