104.22.48.215 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 104.22.48.215 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country:
• Network:
• Noticed: 1 times
• Protocols Attacked: Anonymous Proxy
• Passive DNS Results: quiz.thatsenglish.com www.thatsenglish.com examprep.thatsenglish.com cursooficial.thatsenglish.com xn–eymasuba-0kb56bia.shop elearningwaf.thatsenglish.com proxy.thatsenglish-cdn.com hba.skao.int bookarchive.skao.int www.chauvetlighting.eu qa-fi-ah6-caecom-2653-filter-overlap-new.az.ssdgws.co.uk qa-dk-tk0-testfbmvp-9200-updatetosupport.az.ssdgws.co.uk symantec-enterprise-blogs.security.com staging-symantec-enterprise-podcasts.security.com staging-symantec-enterprise-blogs.security.com symantec-enterprise-podcasts.security.com chauvetlighting.eu staging-symantec-enterprise-podcasts.security.com.cdn.cloudflare.net staging-symantec-enterprise-blogs.security.com.cdn.cloudflare.net symantec-enterprise-podcasts.security.com.cdn.cloudflare.net symantec-enterprise-blogs.security.com.cdn.cloudflare.net usv.network

Malware Detected on Host

Count: 41 47f35401e40dfa80da30f48407040be7c2541f6b3497e824e3f3997b458d5a14 55264037efb2d8da18aaec730b5cd0c24132fb57bb4078945bdbf2896f6982e0 165998bcd5a34eebc7e50f95d0792f2247422175ebc4da92e304b09d39f0771e 6a04db7a4674b36676ce2a6147fa307cb415c2e65091ba4c9f9d167f9a4ef10a 04bea5c672baf46550c13071ed1277f1c9a0666325e150f1f4cf6ef312b39309 12cf8de5d97aeb5262311fa767bb0b2da62b99b00c63f556c10c1e12d055016a 8d795ea5ebe27fdaf4184eb0609e5ce25db2c6f66932e4f152d4e7b22c588a89 47a52f8aedb3e0986a18bb5f3eff7a335f42b3a094c70377e5433d47822ff502 276744f11c3a1da71b0f3ac5152f3c2c77e7e2c1a00a6cc3314bce808735be92 213ca941ac9186203cb4946ddd492862e87704c0a67ffefd4cf49f0bfb83c3fc

Open Ports Detected

2082 2083 2086 2087 2095 443 80 8080 8443 8880

Map

Whois Information

• NetRange: 104.16.0.0 - 104.31.255.255
• CIDR: 104.16.0.0/12
• NetName: CLOUDFLARENET
• NetHandle: NET-104-16-0-0-1
• Parent: NET104 (NET-104-0-0-0-0)
• NetType: Direct Allocation
• OriginAS: AS13335
• Organization: Cloudflare, Inc. (CLOUD14)
• RegDate: 2014-03-28
• Updated: 2024-09-04
• Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
• Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
• Ref: https://rdap.arin.net/registry/ip/104.16.0.0
• OrgName: Cloudflare, Inc.
• OrgId: CLOUD14
• Address: 101 Townsend Street
• City: San Francisco
• StateProv: CA
• PostalCode: 94107
• Country: US
• RegDate: 2010-07-09
• Updated: 2024-11-25
• Ref: https://rdap.arin.net/registry/entity/CLOUD14
• OrgTechHandle: ADMIN2521-ARIN
• OrgTechName: Admin
• OrgTechPhone: +1-650-319-8930
• OrgTechEmail: rir@cloudflare.com
• OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
• OrgAbuseHandle: ABUSE2916-ARIN
• OrgAbuseName: Abuse
• OrgAbusePhone: +1-650-319-8930
• OrgAbuseEmail: abuse@cloudflare.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
• OrgRoutingHandle: CLOUD146-ARIN
• OrgRoutingName: Cloudflare-NOC
• OrgRoutingPhone: +1-650-319-8930
• OrgRoutingEmail: noc@cloudflare.com
• OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
• OrgNOCHandle: CLOUD146-ARIN
• OrgNOCName: Cloudflare-NOC
• OrgNOCPhone: +1-650-319-8930
• OrgNOCEmail: noc@cloudflare.com
• OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
• RTechHandle: ADMIN2521-ARIN
• RTechName: Admin
• RTechPhone: +1-650-319-8930
• RTechEmail: rir@cloudflare.com
• RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
• RAbuseHandle: ABUSE2916-ARIN
• RAbuseName: Abuse
• RAbusePhone: +1-650-319-8930
• RAbuseEmail: abuse@cloudflare.com
• RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
• RNOCHandle: NOC11962-ARIN
• RNOCName: NOC
• RNOCPhone: +1-650-319-8930
• RNOCEmail: noc@cloudflare.com
• RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN

Links to attack logs

anonymous-proxy-ip-list-2025-06-23 anonymous-proxy-ip-list-2025-06-22