104.28.22.99
Classification: Malicious
104.28.22.99 is a malicious IP address in San Francisco, US. Reported by DomainTools and Blocklist.de (HTTP bot, Covid19 scam), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Content Delivery Network — Belongs to a CDN with many allocated resources.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP bot | Blocklist.de | 2026-10-17 08:00:09 | 2026-10-17 08:00:09 | attacker malicious-activity | |
| Covid19 scam | DomainTools | 2020-04-26 09:22:59 | 2020-04-26 09:22:59 | malicious-activity |
Tags
covid19 coronavirus scam phishing attacker spam bruteforce botWhois information
- AS name
- AS13335 CloudFlare
- AS registry
- arin
- AS date
- 2014-03-28 00:00:00
- AS CIDR
- 104.28.16.0/20
- CIDR
- 104.16.0.0/12
- Registrant
- Cloudflare, Inc.
- Address
- 101 Townsend Street
- City
- San Francisco
- State
- CA
- Postal code
- 94107
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2020-04-26 09:22:59
- Last updated
- 2026-10-17 08:00:19