104.28.216.172 is blacklisted, reported for spam, and brute force attacks
1 brute force attacks, last activity .
Status
| Service | Status | Updated | Next steps |
|---|---|---|---|
| Anti-Spam | Blacklisted | Oct 29, 2026 22:09:18 | Get Anti-Spam Plugin or API |
| SpamFireWall | Not in list | Oct 29, 2026 22:09:18 | |
| Security FireWall | Not in list | - | Get Security Plugin |
| Block Lists | Data loading | - | Use via API, Files & DNSBL |
| Type of attacks | Spam, BruteForce | ||
Abuse reports
| There are currently no abuse reports for this email/IP. Report Abuse activity |
Details
| Network | 104.28.216.0/24 parent network: 104.28.216.0/22 |
|---|---|
| Network Spam Rate | 2% |
| DNS name | - |
| AS number | 13335 |
| Org name | Cloudflare, Inc. |
| Location | Ankara, Ankara, Türkiye |
| IP Geolocation | lat: 39.9207; lon: 32.854 |
| | |
| Address | 101 Townsend Street CA 94107 San Francisco UNITED STATES |
| Phone | +1-650-319-8 |
| Website | cloudflare.com |
| AS spam rate | 0.55% |
| Websites hosted on 104.28.216.172 | Data loading |
Brute Force attacks log
| Date/time (GMT) | IP | Nickname | Event |
|---|---|---|---|
| Oct 25, 2026 22:13:03 | 104.28.216.172 | 11** | invalid_username |
| Oct 15, 2026 22:15:05 | 104.28.216.172 | ad** | invalid_username |
| Oct 14, 2026 20:49:04 | 104.28.216.172 | 57** | invalid_username |
104.28.216.0/24 spam active IP addresses
| # | Address (DNS name) | Detected | Last seen | Attacked sites |
|---|---|---|---|---|
| 1 | 104.28.216.172 | Dec 02, 2019 05:59:34 | Oct 30, 2026 03:09:18 | 17 |
| 2 | 104.28.216.175 | Nov 15, 2019 21:46:55 | Oct 30, 2026 03:09:18 | 9 |
| 3 | 104.28.216.95 | Dec 01, 2019 15:01:26 | Oct 23, 2026 22:16:36 | 4 |
104.28.216.172 spam and brute force activity on date
| # | Date | IP | Frequency |
|---|
-
Why is this 104.28.216.172 contacting my website?
This 104.28.216.172 may appear due to bots, crawlers, spam submissions, or automated attacks.
-
Is this 104.28.216.172 safe?
It depends on the IP address status. If it is green and marked as "Not in lists", it is considered safe. If it is "Blacklisted" and shown in red, it means the IP has been involved in abusive activity such as spam, phishing, scam attacks, password brute-force attempts, or hacking attempts.
-
How do I block 104.28.216.172?
Use one of our Anti-Spam plugins, the Security plugin, the Anti-Spam API, or the Block Lists API. If you are not sure which option to choose, please contact our support team: https://cleantalk.org/my/support/open
-
Is this a bot or hacker?
It depends on the activity of the 104.28.216.172. If the Anti-Spam or Security plugins stop the attacks, it is most likely a bot. If they do not stop them, there is a high probability that it is a human attacker.
-
What does "Blacklisted" mean?
It means the 104.28.216.172 is currently performing various types of spam and security attacks on websites.
Your Website Deserves Better Protection
Eliminate spam before it even reaches your inbox.
Get Anti-Spam
