104.28.156.137

Classification: Malicious

104.28.156.137 is a malicious IP address. Reported by 5 threat sources, last seen 2026-09-07. Network: AS13335 Cloudflare, Inc..

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Content Delivery Network — Belongs to a CDN with many allocated resources.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
HTTP Spammer StopForumSpam.com 2024-03-28 11:47:43 2026-09-07 07:17:43 malicious-activity
Bruteforce login attacker Blocklist.de 2026-08-08 09:00:11 2026-08-09 09:00:06 attacker malicious-activity
HTTP Attacker Blocklist.de 2026-08-08 07:00:11 2026-08-09 07:00:06 attacker malicious-activity
HTTP bot Blocklist.de 2026-03-11 04:00:04 2026-07-10 08:00:47 attacker malicious-activity
Mail Spammer Blocklist.de 2026-07-06 12:00:24 2026-07-07 12:00:20 attacker malicious-activity
IMAP Attacker Blocklist.de 2026-07-06 11:00:22 2026-07-07 11:00:18 attacker malicious-activity
Suspicious Host AbuseIPDB 2024-09-21 23:00:04 2026-06-01 10:52:15 anomalous-activity
Malicious Host HoneyDB 2026-05-18 00:00:00 2026-05-18 00:00:00 malicious-activity
Malicious Host AbuseIPDB 2026-03-03 14:58:34 2026-04-29 01:34:36 malicious-activity
Mail Spammer Abuseat.org 2024-03-28 11:47:44 2024-03-28 11:47:44

Tags

bot abuse attacker spam bruteforce imap pop3 sasl mail apache ddos rfi login joomla wordpress

Whois information

AS name
AS13335 Cloudflare, Inc.
AS registry
arin
AS date
2014-03-28 00:00:00
AS CIDR
104.28.156.0/24
CIDR
104.16.0.0/12
Registrant
Cloudflare, Inc.
Address
101 Townsend Street
City
Freising
State
CA
Postal code
85354
Country
DE — Germany 🇩🇪
Contact email
[email protected], [email protected], [email protected]
First indexed
2024-03-28 11:47:43
Last updated
2026-09-07 07:17:43

Malicious IPs in the same CIDR

104.28.156.152 104.28.156.61 104.28.156.151 104.28.156.213 104.28.156.137 104.28.156.54