104.16.106.108 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 104.16.106.108 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

• JARM: 27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6

• View other sources: Spamhaus VirusTotal

• Country:
• Network:
• Noticed: 1 times
• Protocols Attacked: Anonymous Proxy
• Passive DNS Results: triskelion.qconcursos.com arquivos.qconcursos.com vali.qconcursos.com var.qconcursos.com ws.qconcursos.com manutencao.qconcursos.com www.qconcursos.com adm.qconcursos.com sleipnir.prd.qconcursos.com qconcursos.com hyrbil.flygresor.se cars.studentuniverse.com autopujcovna.letenky.com pronajem-aut.studentagency.cz cars.airbaltic.com reservas.alquilerdecoches.com carrental.beontrips.com rentacar.viva.gr rentacar.travel2be.com pronajem-aut.letenky.cz mietwagen.travelstart.de rentalcars.booking.com leiebil.seat24.no rentalcars.com hyrbil.se secure.rentalcars.com www.rentalcars.com www.rentalcars.com.cdn.cloudflare.net bloommedia.co.uk www.bloommedia.co.uk static-push.porndig.com preprod.porndig.com videofiles.porndig.com static.porndig.com assets.porndig.com static2.porndig.com videos.porndig.com porndig.com www.porndig.com

Malware Detected on Host

Count: 11 bd432764c6f6cd2e7a134f21a6970813ab245b0c5323f7067cd7739cc0c40216 57fa67a30504e5c69ac6ec470330289dfd33ba192c8c814a48a2eb75627b4789 ba7f4b4de0cae8b7c1369f4c333bd9055515fde6e8c491692f121e1f1de9801f b565ca2f7166000a1afb7e41d392a7e68f20c8ff392af41f3c1cc7a1082735fd 91571c8b32857df4a54870be51734a6b88dd8d6cad5e917802e323b7315769fc 7bf3697ccb8815bcc29545ccb022fc281bbd4e24704ae0c606c4bb0ceb670f79 219e17c1c5378fa8fc4e96f724c25e4c3dc65650f9fd771e1083babe6578a823 e31a948a81881a174a1255791683bb9cbb7274874443a8eff32243ee8e0625ed 87167600b1c41a783773160cd308f9e05c2fff9365488c5e187e39f0cf416979 6d4d6e654da7849ce1d03fe5294267fe1895deb9eb623e6c656b87cc35bfe44e

Open Ports Detected

2052 2082 2083 2086 2087 2095 443 80 8080 8880

Map

Whois Information

• NetRange: 104.16.0.0 - 104.31.255.255
• CIDR: 104.16.0.0/12
• NetName: CLOUDFLARENET
• NetHandle: NET-104-16-0-0-1
• Parent: NET104 (NET-104-0-0-0-0)
• NetType: Direct Allocation
• OriginAS: AS13335
• Organization: Cloudflare, Inc. (CLOUD14)
• RegDate: 2014-03-28
• Updated: 2024-09-04
• Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
• Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
• Ref: https://rdap.arin.net/registry/ip/104.16.0.0
• OrgName: Cloudflare, Inc.
• OrgId: CLOUD14
• Address: 101 Townsend Street
• City: San Francisco
• StateProv: CA
• PostalCode: 94107
• Country: US
• RegDate: 2010-07-09
• Updated: 2024-11-25
• Ref: https://rdap.arin.net/registry/entity/CLOUD14
• OrgNOCHandle: CLOUD146-ARIN
• OrgNOCName: Cloudflare-NOC
• OrgNOCPhone: +1-650-319-8930
• OrgNOCEmail: noc@cloudflare.com
• OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
• OrgTechHandle: ADMIN2521-ARIN
• OrgTechName: Admin
• OrgTechPhone: +1-650-319-8930
• OrgTechEmail: rir@cloudflare.com
• OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
• OrgAbuseHandle: ABUSE2916-ARIN
• OrgAbuseName: Abuse
• OrgAbusePhone: +1-650-319-8930
• OrgAbuseEmail: abuse@cloudflare.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
• OrgRoutingHandle: CLOUD146-ARIN
• OrgRoutingName: Cloudflare-NOC
• OrgRoutingPhone: +1-650-319-8930
• OrgRoutingEmail: noc@cloudflare.com
• OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
• RAbuseHandle: ABUSE2916-ARIN
• RAbuseName: Abuse
• RAbusePhone: +1-650-319-8930
• RAbuseEmail: abuse@cloudflare.com
• RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
• RNOCHandle: NOC11962-ARIN
• RNOCName: NOC
• RNOCPhone: +1-650-319-8930
• RNOCEmail: noc@cloudflare.com
• RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN
• RTechHandle: ADMIN2521-ARIN
• RTechName: Admin
• RTechPhone: +1-650-319-8930
• RTechEmail: rir@cloudflare.com
• RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN

Links to attack logs

anonymous-proxy-ip-list-2025-06-22