104.28.27.125

Classification: Whitelisted

104.28.27.125 is a whitelisted (trusted) IP address listed by Maltiverse. 8 sightings from 4 threat sources, last seen 2026-10-15.

Current activity

  • Content Delivery Network — Belongs to a CDN with many allocated resources.

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Matched whitelist source: Cloudflare_registrant Maltiverse 2026-07-26 17:17:16 2026-10-15 09:24:22 benign
Proxy IPWhois.io 2026-07-26 17:17:16 2026-07-26 17:17:16 anonymization proxy
Phishing Salesforce Phishtank 2020-12-10 14:23:08 2020-12-10 17:24:26 compromised malicious-activity
virus.vbs.qexvmc Hybrid-Analysis 2020-08-19 20:00:09 2020-08-19 20:00:09
DeepScan:Generic.Ransom.Sodinokibi Hybrid-Analysis 2020-02-19 20:15:25 2020-03-23 02:15:16 S0496 REvil
Phishing Steam Phishtank 2020-03-08 02:51:53 2020-03-08 02:51:53
Warez Mr.Looquer 2019-07-05 02:15:09 2019-07-06 02:24:54
Generic.Malware Hybrid-Analysis 2018-10-26 14:15:15 2018-10-26 14:15:15
Phishing Phishtank 2018-03-08 14:09:52 2018-03-08 14:09:52

Tags

phishing fraud market

Whois information

AS name
AS13335 Cloudflare, Inc.
AS registry
arin
AS date
2014-03-28 00:00:00
AS CIDR
104.28.16.0/20
CIDR
104.16.0.0/12
Registrant
Cloudflare, Inc.
Address
101 Townsend Street
City
Monterrey
State
CA
Postal code
64798
Country
MX — Mexico 🇲🇽
Contact email
[email protected], [email protected], [email protected]
First indexed
2018-03-08 14:09:52
Last updated
2026-10-15 09:24:22

Malicious IPs in the same CIDR

104.28.22.99