AbuseIPDB » 104.21.3.104

104.21.3.104 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	CloudFlare Inc.
Usage Type	Content Delivery Network
Domain Name	cloudflare.com
Country	United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 104.21.3.104 is an IP address from within our whitelist. Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

According to our records, this IP belongs to the subnet 104.16.0.0/12, identified as: "Cloudflare Reverse Proxy"

Report 104.21.3.104

Whois 104.21.3.104

IP Abuse Reports for 104.21.3.104:

This IP address has been reported a total of 19 times from 3 distinct sources. 104.21.3.104 was first reported on July 29th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
fred	2024-08-28 20:41:02 (1 week ago)	as lhbzujcguspaaqabreyiuou.jlszhgjhlzhgs.cn for Yamato parcel service fake login in Japanese	Phishing
Nanoniele	2024-08-28 01:50:00 (1 week ago)	... show more[Phishing e-mail] Subject of e-mail: お荷物お届けのお知らせ【受け取りの日時や場所をご指定ください】 Linked website: dgfjwyhjgdokhgigfr.jlszhgjhlzhgs.cn -> covjiopa-ednem.organiccrap.com Spoofing: Yamato Transport show less	Phishing Email Spam Spoofing
fred	2024-08-26 00:17:35 (1 week ago)	as pmhdamwbjoiucjegjlqzxb.jlszhgjhlzhgs.cn for Yamato parcel service fake login in Japanese	Phishing
fred	2024-08-24 22:28:07 (2 weeks ago)	as nojaglipmnxujhmpvlc.jlszhgjhlzhgs.cn for Yamato parcel service fake login in Japanese	Phishing
pota	2024-08-20 09:43:00 (2 weeks ago)	* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp ... show more* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp/ category: Transportation ---- redirect from URL: https://*.jlszhgjhlzhgs.cn/caonima example: https://edhvhxjbvoucshejlwui.jlszhgjhlzhgs.cn/caonima https://eswehmnwugndszilyhsmpwe.jlszhgjhlzhgs.cn/caonima IP address: 2606:4700:3032::ac43:9984 / 2606:4700:3035::6815:368 / 104.21.3.104 / 172.67.153.132 country: USA hosting: Cloudflare, Inc (Phishing Site GIGA Factory) contact form: https://www.cloudflare.com/abuse ---- redirect to URL: [43.134.94.72] http://yearoldwo-manwas.organiccrap.com/ http://witnes-sawhim.lflinkup.com/ http://requiredewq-e3nformation.xxuz.com/ http://swebvc-xtepst.misecure.com/ [129.226.210.239] https://sembvn-jdfrsin.dnsrd.com/ country: Japan / Singapore hosting: Tencent Cloud Computing / Aceville Pte.Ltd. contact form: https://www.tencentcloud.com/contact-us show less	Phishing Email Spam Spoofing
pota	2024-08-19 15:23:00 (2 weeks ago)	* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp ... show more* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp/ category: Transportation ---- redirect from e-mail receive date _ URL: Mon, 19 Aug 2024 18:56:44 +0900 _ https://zhoelotbvjmdr.jlszhgjhlzhgs.cn/caonima Mon, 19 Aug 2024 19:03:34 +0900 _ https://rwlzdgqqpber.jlszhgjhlzhgs.cn/caonima IP address: 2606:4700:3032::ac43:9984 / 2606:4700:3035::6815:368 / 104.21.3.104 / 172.67.153.132 country: USA hosting: Cloudflare, Inc (Phishing Site GIGA Factory) contact form: https://www.cloudflare.com/abuse ---- redirect to URL: https://busykn-cekda.organiccrap.com/E0WwsC9Wb3dY2GL4PL/ https://strjcrxz-evalin.itemdb.com/E0WwsC9Wb3dY2GL4PL/ IP address: 91.92.247.50 country: USA hosting: Limenet web: limenet.io e-mail: [email protected] show less	Phishing Email Spam Spoofing
fred	2024-08-17 15:11:52 (3 weeks ago)	as ktssnrrnsdpsbdbo.jlszhgjhlzhgs.cn for Yamato parcel service fake login in Japanese	Phishing
Nanoniele	2024-08-14 11:21:00 (3 weeks ago)	... show more[Phishing e-mail] Subject of e-mail: お荷物お届けのお知らせ【受け取りの日時や場所をご指定ください】 Linked website: hnbfyndwudwcthxpxjat.jlszhgjhlzhgs.cn -> akeswt-pfrgby.almostmy.com Spoofing: Yamato Transport show less	Phishing Email Spam Spoofing
fred	2024-08-14 09:50:39 (3 weeks ago)	as hiojgpxgoiysoeznxmvclqvsu.jlszhgjhlzhgs.cn for Yamato parcel service fake login in Japanese	Phishing
pota	2024-08-13 16:23:00 (3 weeks ago)	* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp ... show more* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp/ category: Transportation ---- redirect from URL: https://7unsowssiptvbwzs4jnlf2xke.jlszhgjhlzhgs.cn/caonima https://o5bi4s00jyga1hes97.jlszhgjhlzhgs.cn/caonima https://83v6k8neo1fuukfptme5ygn.jlszhgjhlzhgs.cn/caonima https://edhvhxjbvoucshejlwui.jlszhgjhlzhgs.cn/caonima IP address: 2606:4700:3032::ac43:9984 / 2606:4700:3035::6815:368 / 104.21.3.104 / 172.67.153.132 country: USA hosting: Cloudflare, Inc (Phishing Site GIGA Factory) contact form: https://www.cloudflare.com/abuse ---- redirect to URL: http://yearoldwo-manwas.organiccrap.com/ http://witnes-sawhim.lflinkup.com/ http://requiredewq-e3nformation.xxuz.com/ http://swebvc-xtepst.misecure.com/ IP address: 43.134.94.72 country: Japan / Singapore hosting: Tencent Cloud Computing / Aceville Pte.Ltd. contact form: https://www.tencentcloud.com/contact-us show less	Phishing Email Spam Spoofing
fred	2024-08-10 14:03:23 (4 weeks ago)	as 8rmm2g2ontjrvrjm0lj57.jlszhgjhlzhgs.cn for Yamato parcel service fake login in Japanese	Phishing
fred	2024-08-08 08:13:55 (4 weeks ago)	as 4g3ql3vq5jts.jlszhgjhlzhgs.cn for Yamato parcel service fake login in Japanese	Phishing
pota	2024-08-05 13:07:00 (1 month ago)	* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp ... show more* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp/ category: Transportation ---- redirect from e-mail receive date _ URL: Wed, 31 Jul 2024 03:31:00 +0900 _ https://7unsowssiptvbwzs4jnlf2xke.jlszhgjhlzhgs.cn/caonima Sat, 3 Aug 2024 15:30:09 +0900 _ https://o5bi4s00jyga1hes97.jlszhgjhlzhgs.cn/caonima Mon, 5 Aug 2024 21:53:52 +0900 _ https://83v6k8neo1fuukfptme5ygn.jlszhgjhlzhgs.cn/caonima IP address: 2606:4700:3032::ac43:9984 / 2606:4700:3035::6815:368 / 104.21.3.104 / 172.67.153.132 country: USA hosting: Cloudflare, Inc (Phishing Site GIGA Factory) contact form: https://www.cloudflare.com/abuse ---- redirect to URL: http://yearoldwo-manwas.organiccrap.com/ http://witnes-sawhim.lflinkup.com/ http://requiredewq-e3nformation.xxuz.com/ IP address: 43.134.94.72 country: Japan / Singapore hosting: Tencent Cloud Computing / Aceville Pte.Ltd. contact form: https://www.tencentcloud.com/contact-us show less	Phishing Email Spam Spoofing
pota	2024-08-03 08:53:00 (1 month ago)	* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp ... show more* Phishing website Spoofing YAMATO TRANSPORT genuine site: https://www.kuronekoyamato.co.jp/ category: Transportation ---- redirect from e-mail receive date _ URL: Wed, 31 Jul 2024 03:31:00 +0900 _ https://7unsowssiptvbwzs4jnlf2xke.jlszhgjhlzhgs.cn/caonima Sat, 3 Aug 2024 15:30:09 +0900 _ https://o5bi4s00jyga1hes97.jlszhgjhlzhgs.cn/caonima IP address: 2606:4700:3032::ac43:9984 / 2606:4700:3035::6815:368 / 104.21.3.104 / 172.67.153.132 country: USA hosting: Cloudflare, Inc (Phishing Site GIGA Factory) contact form: https://www.cloudflare.com/abuse ---- redirect to URL: http://yearoldwo-manwas.organiccrap.com/ http://witnes-sawhim.lflinkup.com/ IP address: 43.134.94.72 country: Japan / Singapore hosting: Tencent Cloud Computing / Aceville Pte.Ltd. contact form: https://www.tencentcloud.com/contact-us e-mail: [email protected], [email protected], [email protected] show less	Phishing Email Spam Spoofing
fred	2024-08-03 06:15:57 (1 month ago)	as hh2vgu6sb9ywj2a1uv69shvus.jlszhgjhlzhgs.cn for Yamato parcel service fake login in Japanese;<br / ... show moreas hh2vgu6sb9ywj2a1uv69shvus.jlszhgjhlzhgs.cn for Yamato parcel service fake login in Japanese; again as nkz9w1zvt8g9bvqi.jlszhgjhlzhgs.cn 10 mins later show less	Phishing