104.237.252.22
Classification: Whitelisted
104.237.252.22 is a whitelisted (trusted) IP address listed by Maltiverse. 170 sightings from 7 threat sources, last seen 2026-10-11.
Current activity
- VPN node — Provides anonymization that can hide an attacker.
- Hosting provider — Shared hosting infrastructure.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2026-05-04 05:47:36 | 2026-10-11 18:12:32 | anonymization vpn | |
| Hosting Provider | Maltiverse | 2026-08-02 09:15:15 | 2026-08-02 09:15:15 | benign hosting | |
| Proxy | FireHOL | 2023-01-03 13:32:24 | 2025-10-07 00:40:02 | anonymization | |
| Loki Password Stealer (PWS) | ThreatFox Abuse.ch | 2024-08-22 10:17:11 | 2024-08-24 09:20:05 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2022-11-19 02:06:58 | 2023-06-23 04:26:37 | malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2023-01-26 02:12:32 | 2023-01-27 02:10:25 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2023-01-26 01:51:01 | 2023-01-27 01:50:55 | malicious-activity | |
| ET COMPROMISED Known Compromised or Hostile Host Traffic UDP | Emerging Threats | 2022-12-14 02:24:02 | 2023-01-16 08:58:40 | malicious-activity | |
| ET COMPROMISED Known Compromised or Hostile Host Traffic TCP | Emerging Threats | 2022-12-14 02:23:59 | 2023-01-16 08:58:37 | malicious-activity | |
| Bruteforce | Maltiverse | 2022-11-03 01:53:02 | 2022-12-28 09:28:00 | malicious-activity | |
| SSH Attacker | Maltiverse | 2022-11-03 01:53:02 | 2022-12-26 00:35:54 | malicious-activity | |
| Malicious Host | Maltiverse | 2022-11-17 09:58:30 | 2022-12-24 16:42:04 | compromised malicious-activity | |
| Port Scanner | Maltiverse | 2022-11-03 01:53:02 | 2022-12-24 00:09:38 | anomalous-activity | |
| Hacking | Maltiverse | 2022-11-03 01:53:02 | 2022-12-24 00:09:38 | malicious-activity | |
| SQL Injection | Maltiverse | 2022-12-19 09:48:00 | 2022-12-19 09:48:00 | malicious-activity | |
| IoT Attacker | Maltiverse | 2022-12-19 09:48:00 | 2022-12-19 09:48:00 | malicious-activity | |
| HTTP Scrapper | Maltiverse | 2022-12-09 05:23:39 | 2022-12-19 09:48:00 | anomalous-activity | |
| DDoS attack | Maltiverse | 2022-11-03 01:53:02 | 2022-12-19 09:48:00 | malicious-activity | |
| FTP Attacker | Maltiverse | 2022-11-03 01:53:02 | 2022-12-19 09:48:00 | malicious-activity | |
| IMAP Attacker | Maltiverse | 2022-11-03 01:53:02 | 2022-12-19 09:48:00 | malicious-activity | |
| Malicious Host | HoneyDB | 2022-12-18 00:00:00 | 2022-12-18 00:00:00 | malicious-activity | |
| HTTP Attacker | Maltiverse | 2022-11-16 13:40:32 | 2022-12-16 04:49:11 | malicious-activity | |
| Mail Spammer | Maltiverse | 2022-11-03 01:53:02 | 2022-11-22 20:48:14 | malicious-activity | |
| Phishing | Maltiverse | 2022-11-03 01:53:02 | 2022-11-03 01:53:02 | malicious-activity |
Tags
anonymization ssh bruteforce bot attacker login joomla wordpress apache ddos rfi infostealer lokibot stealer port:80 burkina loki lokipwsWhois information
- AS name
- AS16628 DedFiberCo
- AS registry
- arin
- AS date
- 2014-12-03 00:00:00
- AS CIDR
- 104.237.252.0/24
- CIDR
- 104.237.224.0/19
- Registrant
- DedFiberCo
- Address
- 913 N Market Street Suit 200
- City
- Philadelphia
- State
- PA
- Postal code
- 19032
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2022-11-19 02:06:58
- Last updated
- 2026-10-11 18:12:32