104.237.252.28
Classification: Whitelisted
104.237.252.28 is a whitelisted (trusted) IP address listed by Maltiverse. 54 sightings from 4 threat sources, last seen 2026-10-11.
Current activity
- VPN node — Provides anonymization that can hide an attacker.
- Hosting provider — Shared hosting infrastructure.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2026-08-02 06:48:55 | 2026-10-11 14:12:07 | anonymization vpn | |
| Hosting Provider | Maltiverse | 2026-08-02 06:48:56 | 2026-08-02 06:48:56 | benign hosting | |
| Loki Password Stealer (PWS) | ThreatFox Abuse.ch | 2024-03-22 19:20:40 | 2024-03-24 18:21:26 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2020-05-28 01:48:44 | 2020-06-04 00:23:29 | ||
| Malicious Host | HoneyDB | 2020-05-31 00:00:00 | 2020-05-31 00:00:00 |
Tags
ssh bruteforce bot infostealer lokibot stealer port:80 burkina loki lokipwsWhois information
- AS name
- AS16628 DedFiberCo
- Registrant
- DedFiberCo
- City
- Philadelphia
- State
- PA
- Postal code
- 19032
- Country
- US — United States 🇺🇸
- First indexed
- 2020-05-28 01:48:44
- Last updated
- 2026-10-11 14:12:08