104.18.21.21 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 104.18.21.21 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Possibly Malicious Host 🟢 10/100
Host and Network Information
- View other sources: Spamhaus VirusTotal
- Country:
- Network:
- Noticed: 1 times
- Protocols Attacked: Anonymous Proxy
- Passive DNS Results: memberaccess.ncsecu.org memberaccess.ncsecu.org.cdn.cloudflare.net careers.johnsonfinancialgroup.com 3veinte.es direct-asia-sg-staging.ecommerce.p-r.io dco-backoffice-staging.ecommerce.p-r.io staffshop-pruk-online-prod.ecommerce.p-r.io prw-cp-tr-dev.ecommerce.p-r.io prw-cp-tr-staging.ecommerce.p-r.io innovisk-suremga.sstinsurity.com www.snus.com franchise-business-kagl.de foundryins-suremga-uat.sstinsurity.com banner.memberaccess.ncsecu.org prw-cp-nz-dev.ecommerce.p-r.io 2.camtools.net cw-sg.com staffshop-pruk-online-staging.ecommerce.p-r.io control.memberaccess.ncsecu.org 8vnd.net ztserver.me camtools.net trggqiv.vip lecercle-asia-sg-staging.ecommerce.p-r.io pgrecife777.com drinksandco-es-staging.ecommerce.p-r.io direct-asia-staging.ecommerce.p-r.io direct-asia-jp-staging.ecommerce.p-r.io johnsonfinancialgroup.com lecercle-europe-ch-staging.ecommerce.p-r.io lexusportland.com dxctrunner26vd9sprep-slot.paastest.epimore.com dxctrunner26vd9sprep.paastest.epimore.com gopicturemediaplus.com partner.yogiyo.co.kr.cdn.cloudflare.net owner.yogiyo.co.kr.cdn.cloudflare.net ceo-replica.yogiyo.co.kr widget-proxy-activites.decathlon.fr spicyspins.com m.aboutyou.lt www.aboutyou.lt ceo-api-replica.yogiyo.co.kr yotimedeal.yogiyo.co.kr payo.yogiyo.co.kr suggestion.yogiyo.co.kr relayo.yogiyo.co.kr adiyo.yogiyo.co.kr recommendation.yogiyo.co.kr cartyo.yogiyo.co.kr discovery.yogiyo.co.kr discovery-review.yogiyo.co.kr menuyo.yogiyo.co.kr partner.yogiyo.co.kr fr-support.yogiyo.co.kr owner.yogiyo.co.kr www.whitemarshauthority.com edge.tenants.plf-atlas-oplog-test-2.auth0c.com wt.plf-atlas-oplog-test-2.auth0c.com plf-atlas-oplog-test-2.auth0c.com aboutyou.lt wouaf-miaou.ch qa-gb-a5v-fbmvp-10643-m8-getappointments.az.ssdgws.co.uk cyberdrill.alshaya.com www-preview.aboutyou.lt qa-es-hw4-cmsrd-212-enable-downstream-he.az.ssdgws.co.uk qa-no-amu-testfbmvp-7482-remembersearchb.az.ssdgws.co.uk www.pipefy.com qa-nl-au2-fbmvp-5577-changeauthbasicsecr.az.ssdgws.co.uk qa-no-xg2-fixfbmvp-11455-fixgetappointme.az.ssdgws.co.uk wt.plf-test-auth0-devstk-redis6.auth0c.com edge.tenants.plf-test-auth0-devstk-redis6.auth0c.com plf-test-auth0-devstk-redis6.auth0c.com analytics.onekey.iqvia.com zugdb.vip shopbiote.com www.visacentral.ca test-azure-singler.auth0c.com edge.tenants.test-azure-singler.auth0c.com wt.test-azure-singler.auth0c.com edgetests.effell.team b9k55.com peeriusdev.episerver.net shop.straubs.com straubs.instacart.com straubs.pbis-cf.instacart.com au-giveaways.com owa-admin.onekey.iqvia.com sentry.onekey.iqvia.com menuapi.sundayworld.com previewmenuapi.sundayworld.com devdtp.shopbiote.com qaecom.shopbiote.com qaemployees.shopbiote.com qapatients.shopbiote.com testmenuapi.sundayworld.com 17ecc85fcca6639e40fe890cc43cf1b0d9befef1.vercel-workers.com visacentral.ca testdeskingapi.sundayworld.com deskingapi.sundayworld.com cerospares.com focus.sundayworld.com mimicapi.sundayworld.com previewmimicapi.sundayworld.com testmimicapi.sundayworld.com www2021.sundayworld.com m2021.sundayworld.com ecom.shopbiote.com www.shopbiote.com patients.shopbiote.com employees.shopbiote.com golden42.com previewgraphql.sundayworld.com 24porn.com previewfocus.sundayworld.com stuntplays.com www.goldeneagleresort.com edit.johnsonsbaby.com.co www.johnsonsbaby.com.co carrier-rentals.com www.au-giveaways.com snus.com berwynberwynberwyn.com johnsonsbaby.com.co previewstatic.sundayworld.com preview.sundayworld.com test.sundayworld.com testmarkup.sundayworld.com previewm.sundayworld.com hotfixmarkup.sundayworld.com hotfixstatic.sundayworld.com previewmarkup.sundayworld.com hotfixm.sundayworld.com teststatic.sundayworld.com hotfix.sundayworld.com testm.sundayworld.com branches.guildmortgage.com huile-moteur.ch www.huile-moteur.ch test.huile-moteur.ch ir.guildmortgage.com.cdn.cloudflare.net myaccount.guildmortgage.com.cdn.cloudflare.net dinosaur.lonestar.org mycircle.guildmortgage.com.cdn.cloudflare.net nemesis.lonestar.org sagecloudservices.ch www.coraletta.eu.cdn.cloudflare.net johnsonsbaby.com.co.cdn.cloudflare.net www.johnsonsbaby.com.co.cdn.cloudflare.net www.guildmortgage.com.cdn.cloudflare.net hy-vee.cloudflaresso.com service.lonestar.org cloudflare.customers.service.lonestar.org womenbe.com efsanebahis88.com rbdms.org ed232.com casinodisko.net pharaon777.com pa.caesarsonline.com ristleunselyfonte.info edit.johnsonsbaby.com.co.cdn.cloudflare.net www.wxirkd.live wxirkd.live www.xzfgdz.live xzfgdz.live www.womenbe.com.cdn.cloudflare.net
Open Ports Detected
2082 2083 2086 2087 2095 2096 443 80 8080 8443 8880
Map
Whois Information
- NetRange: 104.16.0.0 - 104.31.255.255
- CIDR: 104.16.0.0/12
- NetName: CLOUDFLARENET
- NetHandle: NET-104-16-0-0-1
- Parent: NET104 (NET-104-0-0-0-0)
- NetType: Direct Allocation
- OriginAS: AS13335
- Organization: Cloudflare, Inc. (CLOUD14)
- RegDate: 2014-03-28
- Updated: 2024-09-04
- Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
- Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
- Ref: https://rdap.arin.net/registry/ip/104.16.0.0
- OrgName: Cloudflare, Inc.
- OrgId: CLOUD14
- Address: 101 Townsend Street
- City: San Francisco
- StateProv: CA
- PostalCode: 94107
- Country: US
- RegDate: 2010-07-09
- Updated: 2024-11-25
- Ref: https://rdap.arin.net/registry/entity/CLOUD14
- OrgRoutingHandle: CLOUD146-ARIN
- OrgRoutingName: Cloudflare-NOC
- OrgRoutingPhone: +1-650-319-8930
- OrgRoutingEmail: noc@cloudflare.com
- OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
- OrgTechHandle: ADMIN2521-ARIN
- OrgTechName: Admin
- OrgTechPhone: +1-650-319-8930
- OrgTechEmail: rir@cloudflare.com
- OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
- OrgNOCHandle: CLOUD146-ARIN
- OrgNOCName: Cloudflare-NOC
- OrgNOCPhone: +1-650-319-8930
- OrgNOCEmail: noc@cloudflare.com
- OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
- OrgAbuseHandle: ABUSE2916-ARIN
- OrgAbuseName: Abuse
- OrgAbusePhone: +1-650-319-8930
- OrgAbuseEmail: abuse@cloudflare.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
- RTechHandle: ADMIN2521-ARIN
- RTechName: Admin
- RTechPhone: +1-650-319-8930
- RTechEmail: rir@cloudflare.com
- RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
- RNOCHandle: NOC11962-ARIN
- RNOCName: NOC
- RNOCPhone: +1-650-319-8930
- RNOCEmail: noc@cloudflare.com
- RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN
- RAbuseHandle: ABUSE2916-ARIN
- RAbuseName: Abuse
- RAbusePhone: +1-650-319-8930
- RAbuseEmail: abuse@cloudflare.com
- RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
Links to attack logs
anonymous-proxy-ip-list-2025-06-23 anonymous-proxy-ip-list-2025-06-22
Share on: