104.244.79.187

Classification: Whitelisted

104.244.79.187 is a whitelisted (trusted) IP address listed by Maltiverse. 19 sightings from 14 threat sources, last seen 2026-07-25. Network: AS53667 BuyVM.

Current activity

  • VPN node — Provides anonymization that can hide an attacker.
  • Hosting provider — Shared hosting infrastructure.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-25 09:15:57 2026-07-25 09:15:57 benign hosting
VPN IPWhois.io 2026-07-25 09:15:56 2026-07-25 09:15:56 anonymization vpn
Proxy IPWhois.io 2025-11-21 00:32:46 2025-11-21 00:32:46 anonymization
TOR Exit Node TorProject.org 2020-12-27 20:31:14 2023-05-18 03:26:49 anonymization anonymizer
DDoS attack Blocklist.net.ua 2022-07-14 02:10:33 2023-04-02 07:13:01 malicious-activity
HTTP Spammer StopForumSpam.com 2020-12-31 14:42:19 2023-02-18 09:06:58 malicious-activity
Anonymizer FireHol 2022-12-30 00:26:29 2022-12-30 00:26:29 anonymization
HTTP Spammer Sblam 2021-01-09 03:56:07 2022-12-12 01:37:31 malicious-activity
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic Emerging Threats 2020-12-29 07:36:49 2022-12-12 01:16:18 anonymization
ET TOR Known Tor Exit Node TCP Traffic Emerging Threats 2020-12-29 07:33:42 2022-12-12 01:14:42 anonymization
HTTP Spammer Botscout 2022-03-01 00:48:49 2022-03-01 00:48:49 malicious-activity
Bruteforce login attacker Blocklist.de 2021-01-22 00:11:07 2022-01-27 01:41:04 malicious-activity
HTTP Attacker Blocklist.de 2021-01-21 08:57:51 2022-01-27 01:33:18 malicious-activity
Malware Hybrid-Analysis 2021-07-20 10:31:07 2021-12-13 14:00:18
DDoS Attacker Blocklist.net.ua 2021-05-23 22:14:11 2021-05-25 06:31:06 malicious-activity
Anonymizer Maltiverse Research Team 2020-12-28 05:14:26 2021-05-23 05:17:13 anonymizer
DDoS attack on site dtse.dp.ua Blocklist.net.ua 2021-02-02 10:34:47 2021-04-02 10:15:49 malicious-activity
Anonymizer Maltiverse 2020-12-27 13:28:21 2021-03-03 21:55:21
Mail Spammer Abuseat.org 2021-01-03 02:03:48 2021-01-31 11:28:20
HTTP Spammer Cleantalk.org 2021-01-25 11:03:49 2021-01-25 11:03:49

Tags

tor anonymization abuse bot attacker login bruteforce joomla wordpress apache ddos rfi anonymizer

Whois information

AS name
AS53667 BuyVM
AS registry
arin
AS date
2014-11-10 00:00:00
AS CIDR
104.244.79.0/24
CIDR
104.244.72.0/21
Registrant
BuyVM
Address
1621 Central Ave
City
Zurich
State
WY
Postal code
8032
Country
CH — Switzerland 🇨🇭
Contact email
[email protected]
First indexed
2020-12-27 13:28:21
Last updated
2026-07-25 09:15:57

Malicious IPs in the same CIDR

104.244.79.44 104.244.79.50 104.244.79.61 104.244.79.75 104.244.79.40 104.244.79.25