104.18.13.216 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 104.18.13.216 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Possibly Malicious Host 🟢 10/100
Host and Network Information
- View other sources: Spamhaus VirusTotal
- Country:
- Network:
- Noticed: 1 times
- Protocols Attacked: Anonymous Proxy
- Passive DNS Results: resc.quizfoto.com www.rivalo-bet-br.dev grafana-wo.platform.test.automation.ibm.com opal-refund-form.signnow.com www.visa.co.za.cdn.cloudflare.net memparkfly.com dd-form-2656.signnow.com gtm.signnow.com gtm.signnow.com.cdn.cloudflare.net italy-application-form.signnow.com mrghost.com www.cityofnewburyport.com cfdemolab-zone-0000015090.cfdemolab.xyz xoilacd.top 5p5555.com api.signnow.com api.signnow.com.cdn.cloudflare.net raumanseurakunta.fi rivalo-bet-br.dev juniqe.se demomanage.loanliner.com www.epiccommercehub.com juventude777dg.com georeentryconnect.com blog.nora-soderlund.com circleslife.net visitcheltenham.com top.quizfoto.com nora-soderlund.com solar-api.nora-soderlund.com cphdream.com quizfoto.com jobs.alwaysherehomecare.com track.kingfin.com careers.rallypoint.com jobs.digitalpacific.com.au alwaysherehomecare.theresumator.com rallypoint.theresumator.com digitalpacific.theresumator.com www.quizfoto.com snseats.signnow.com.cdn.cloudflare.net app.signnow.com.cdn.cloudflare.net *.signnow.com.cdn.cloudflare.net constructioncareerconnect.com www.signnow.com.cdn.cloudflare.net designportal.lendlease.com sre-console-api.platform.test.automation.ibm.com scorecard.platform.test.automation.ibm.com sre-console.platform.test.automation.ibm.com status.platform.test.automation.ibm.com trkmad.com kingfin.com fabricfleece.online hairglueremover.online cdemoaigc.online ademoaigc.online bdemoaigc.online dev.srmportal.kimclark.com aws-lst-dev7.auth0c.com grafana-cs.platform.test.automation.ibm.com grafana-itom.platform.test.automation.ibm.com prometheus-turbo.platform.test.automation.ibm.com www.sazeracsummergetaway.com shop.bntdiamonds.com sazeracsummergetaway.com prometheus-dawa.platform.test.automation.ibm.com thanos-querier-dawa.platform.test.automation.ibm.com www.visa.com.vc wt.rea-group.auth0app.com rea-group.auth0app.com edge.tenants.rea-group.auth0app.com edge.tenants.test-aws-awful-hamster-4942.auth0c.com wt.test-aws-awful-hamster-4942.auth0c.com test-aws-awful-hamster-4942.auth0c.com prometheus-ap.platform.test.automation.ibm.com alertmanager-ap.platform.test.automation.ibm.com n1casino.rs smtp.vasylkovecka-gromada.gov.ua pop.vasylkovecka-gromada.gov.ua prometheus-appc.platform.test.automation.ibm.com thanos-querier-appc.platform.test.automation.ibm.com merlin.killik.com api-test.staging.budgetair.ru api-test.development.budgetair.ru api.budgetair.ru grafana-sgi.platform.test.automation.ibm.com stg.dol.noycia.ca prod.dol.noycia.ca dev.dol.noycia.ca stackstorm-appc.platform.test.automation.ibm.com zz3.myfpp.top zz2.myfpp.top xyz.myfpp.top abc.myfpp.top wt.test-aws-confused-penguin-8065.auth0c.com edge.tenants.test-aws-confused-penguin-8065.auth0c.com test-aws-confused-penguin-8065.auth0c.com cdnpoc.roberthalf.com api.staging.budgetair.ru api.development.budgetair.ru aaaaa.haox.top zc-a.haox.top zc-b.haox.top zc11.haox.top syq-test.haox.top staging.bntdiamonds.com craftstaging.bntdiamonds.com a3.haox.top jackpotcitycasino.se infologia.pt www.gaoyufei.top blog.jackpotcitycasino.se ssm-broker.platform.test.automation.ibm.com aa.haox.top www.vasylkovecka-gromada.gov.ua alt.vasylkovecka-gromada.gov.ua artvisionsf.com vasylkovecka-gromada.gov.ua www.bntdiamonds.com www.killik.com killik.com b2.izjl.top qa-nl-wql-caecom-3415-updatetousecontext.az.ssdgws.co.uk legacy.killik.com b1.izjl.top a1.izjl.top app.colpipe.com www.yuxuemin.top jennifer23.zzzyxm.top shops.v3.myfunpinpin.top zzzyxm.top www.zzzyxm.top yxm.pify.top qyrdvu.com edge.tenants.aws-test-48.auth0c.com wt.aws-test-48.auth0c.com aws-test-48.auth0c.com store.inter-dev.it sub.dxctngnadxce1xl7prod.paastest.co.uk carrier-kt.at www.lantmannenunibake.it widgitonline.com zzz130.top v3-2.zzz130.top www.zzz130.top v3-5.zzz130.top v3-4.zzz130.top v3-3.zzz130.top v3-1.zzz130.top v3.zzz130.top cf-test.kiwisns.com v3.myfunpinpin.top wegotthis.mobi southstateduncanwilliams.com vietnamsports.bet couriers.devie.skipthedishes.com www.swegonairacademy.com kwikmed.co.uk bntdiamonds.com www.auctionzipauctions.com cfpre.inspectorio-platform.com cfapp-pre.inspectorio-platform.com cf-kong-api-pre.inspectorio-platform.com cf-rise-api-pre.inspectorio-platform.com cfrise-pre.inspectorio-platform.com 8cafa9d5d28f6617c21889ad99f1d5d994c19c36.vercel-workers.com mobile-app.roberthalf.com mobile-trading-uat1.dbs.com uat1-mobile-trading.dbs.com commercialqa.cafe digipass.us d8-int7.roberthalf.com d8-int6.roberthalf.com d8-qs6.roberthalf.com www.taiwan-dumplings.com www.een-kans.com xn–xz2b85c.com www.funwithhardcore.com www.latinxxxdates.com www.hotasianlust.com www.funwithlesbian.com rocketship.cash www.dataformdesk.com www.wirezonefee.com hotasianlust.com een-kans.com taiwan-dumplings.com pro.swegonairacademy.com dev.recruit.ono.co.jp recruit.ono.co.jp stage.recruit.ono.co.jp wirezonefee.com int.swegonairacademy.com pre.swegonairacademy.com asswrecker.com www.roberthalf.com oceanafrica.co.za www.oceanafrica.co.za uat1-mobile-trading.dbs.com.cdn.cloudflare.net mobile-app.roberthalf.com.cdn.cloudflare.net www.lakeviewmedical.com.cdn.cloudflare.net vidaxl.com.br funwithhardcore.com www.qualeclubs.com qualeclubs.com www.countryfarms.pt.cdn.cloudflare.net dataformdesk.com ccc980.com 2123se.com marketbook.de nayamusic.fr 506wager.com funwithlesbian.com site.customerssubscribesnow.com ebonylustxxx.com latinxxxdates.com medicare-enrollment-options.easymedicare.com.cdn.cloudflare.net d8-qs7.roberthalf.com.cdn.cloudflare.net d8-int3.roberthalf.com.cdn.cloudflare.net d8-ut2.roberthalf.com.cdn.cloudflare.net d8-stg.roberthalf.com.cdn.cloudflare.net d8-qs1.roberthalf.com.cdn.cloudflare.net d8-dev3.roberthalf.com.cdn.cloudflare.net d8-int2.roberthalf.com.cdn.cloudflare.net d8-preprod.roberthalf.com.cdn.cloudflare.net d8-qs6.roberthalf.com.cdn.cloudflare.net d8-int7.roberthalf.com.cdn.cloudflare.net d8-int6.roberthalf.com.cdn.cloudflare.net fslive.betechtv.com.cdn.cloudflare.net 3458ww.com www.fortasec.com.cdn.cloudflare.net goterru.com d8-qs2.roberthalf.com.cdn.cloudflare.net d8-int4.roberthalf.com.cdn.cloudflare.net d8-qs3.roberthalf.com.cdn.cloudflare.net d8-qs5.roberthalf.com.cdn.cloudflare.net d8-qs4.roberthalf.com.cdn.cloudflare.net d8-ut1.roberthalf.com.cdn.cloudflare.net d8-int1.roberthalf.com.cdn.cloudflare.net d8-dev5.roberthalf.com.cdn.cloudflare.net d8-dev4.roberthalf.com.cdn.cloudflare.net d8-mkt1.roberthalf.com.cdn.cloudflare.net d8-int5.roberthalf.com.cdn.cloudflare.net www.roberthalf.com.cdn.cloudflare.net eromanga-night.com
Open Ports Detected
2082 2083 2086 2087 2095 2096 443 80 8080 8443 8880
Map
Whois Information
- NetRange: 104.16.0.0 - 104.31.255.255
- CIDR: 104.16.0.0/12
- NetName: CLOUDFLARENET
- NetHandle: NET-104-16-0-0-1
- Parent: NET104 (NET-104-0-0-0-0)
- NetType: Direct Allocation
- OriginAS: AS13335
- Organization: Cloudflare, Inc. (CLOUD14)
- RegDate: 2014-03-28
- Updated: 2024-09-04
- Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
- Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
- Ref: https://rdap.arin.net/registry/ip/104.16.0.0
- OrgName: Cloudflare, Inc.
- OrgId: CLOUD14
- Address: 101 Townsend Street
- City: San Francisco
- StateProv: CA
- PostalCode: 94107
- Country: US
- RegDate: 2010-07-09
- Updated: 2024-11-25
- Ref: https://rdap.arin.net/registry/entity/CLOUD14
- OrgTechHandle: ADMIN2521-ARIN
- OrgTechName: Admin
- OrgTechPhone: +1-650-319-8930
- OrgTechEmail: rir@cloudflare.com
- OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
- OrgRoutingHandle: CLOUD146-ARIN
- OrgRoutingName: Cloudflare-NOC
- OrgRoutingPhone: +1-650-319-8930
- OrgRoutingEmail: noc@cloudflare.com
- OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
- OrgNOCHandle: CLOUD146-ARIN
- OrgNOCName: Cloudflare-NOC
- OrgNOCPhone: +1-650-319-8930
- OrgNOCEmail: noc@cloudflare.com
- OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
- OrgAbuseHandle: ABUSE2916-ARIN
- OrgAbuseName: Abuse
- OrgAbusePhone: +1-650-319-8930
- OrgAbuseEmail: abuse@cloudflare.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
- RNOCHandle: NOC11962-ARIN
- RNOCName: NOC
- RNOCPhone: +1-650-319-8930
- RNOCEmail: noc@cloudflare.com
- RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN
- RAbuseHandle: ABUSE2916-ARIN
- RAbuseName: Abuse
- RAbusePhone: +1-650-319-8930
- RAbuseEmail: abuse@cloudflare.com
- RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
- RTechHandle: ADMIN2521-ARIN
- RTechName: Admin
- RTechPhone: +1-650-319-8930
- RTechEmail: rir@cloudflare.com
- RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
Links to attack logs
anonymous-proxy-ip-list-2025-06-23 anonymous-proxy-ip-list-2025-06-22
Share on: