104.28.225.122
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cloudflare, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13335
- Domain Name
- cloudflare.com
- Country
- ๐ฉ๐ช Germany
- City
- Nuremberg, Bavaria
Abuse Reports
Total reports
404 from
178 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐จ๐ญ TheCoon |
Automated: Credential theft attempt - JSON bomb served
|
Web App Attack Hacking | |
| Anonymous |
fail2ban: brute-force/credential spraying against mail (IMAP/POP/webmail) โ rmnet.it
|
Brute-Force | |
| Anonymous |
104.28.225.122 (DE/Germany/Bavaria/Nuremberg/-/[redacted]
|
Brute-Force | |
| ๐ธ๐ช triplecode |
Reported from hMailServer
|
Hacking | |
| Anonymous |
Failed login attempt detected by Fail2Ban in plesk-postfix jail
|
Brute-Force | |
| ๐บ๐ธ Zestysoft |
|
Brute-Force | |
| ๐ณ๐ฑ Site.eu |
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
|
Hacking Web App Attack | |
| ๐ฟ๐ฆ maximonline.co.za |
Brute Force IMAP AUTH Attack
|
Brute-Force | |
| ๐ฟ๐ฆ hostsec_za |
SMTP/IMAP/POP3 Auth Attack. 11 failed logins in 6 hours.
|
Brute-Force | |
| ๐ณ๐ฑ maxxsense |
104.28.225.122 (DE/Germany/-), 12 distributed imapd attacks on account [redacted]
|
Brute-Force | |
| ๐ฉ๐ช jasperedv.de |
Failed IMAP Login - Brutforcing
|
Email Spam Brute-Force | |
| ๐ซ๐ท basing |
2026-10-29 12:15:54 pzb SASL PLAIN auth failed: rhost=104.28.225.122...
|
Brute-Force | |
| ๐บ๐ธ NXTwoThou |
POP3
|
Brute-Force | |
| ๐ซ๐ท ingroscart.it |
(imapd) Failed IMAP login from 104.28.225.122 (DE/Germany/Bavaria/Nuremberg/-/[redacted])
|
Brute-Force | |
| ๐ฌ๐ง Aetherweb Ark |
(mod_security) mod_security (id:35002) triggered by 104.28.225.122 (DE/Germany/-): N in the last X secs
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown