104.28.162.138
Classification: Malicious
104.28.162.138 is a malicious IP address. Reported by 3 threat sources, last seen 2026-09-09. Network: AS13335 Cloudflare, Inc..
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Content Delivery Network — Belongs to a CDN with many allocated resources.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | StopForumSpam.com | 2026-07-02 09:04:08 | 2026-09-09 07:23:16 | malicious-activity | |
| Mail Spammer | Blocklist.de | 2026-06-16 12:00:30 | 2026-08-12 12:00:21 | attacker malicious-activity | |
| IMAP Attacker | Blocklist.de | 2026-07-06 11:00:23 | 2026-07-07 11:00:20 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-11-27 19:55:08 | 2026-06-02 01:23:22 | anomalous-activity |
Tags
mail spam bot abuse attacker imap pop3 saslWhois information
- AS name
- AS13335 Cloudflare, Inc.
- AS registry
- arin
- AS date
- 2014-03-28 00:00:00
- AS CIDR
- 104.28.162.0/24
- CIDR
- 104.16.0.0/12
- Registrant
- Cloudflare, Inc.
- Address
- 101 Townsend Street
- City
- San Francisco
- State
- CA
- Postal code
- 94107
- Country
- FR — France 🇫🇷
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2024-11-28 07:42:03
- Last updated
- 2026-09-09 07:23:16