104.26.12.39 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 104.26.12.39 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Possibly Malicious Host 🟢 10/100
Host and Network Information
- View other sources: Spamhaus VirusTotal
- Country: United States
- Network:
- Noticed: 1 times
- Protocols Attacked: Anonymous Proxy
- Passive DNS Results: contpaqreports.contpaqinube.com comtrackerai.com anjlok97.pusat4dbest.com angin8e.pusat4dbest.com vidhide.org www.porn5f.com porn5f.com hjklaiatar.jfenvjns.xyz accountsuitehelpcenter.com go1pay.com becreatives.co registro.contpaqinube.com sitestopfr.com cdn5.npcdn.net sonce.org.mk marat-rashidovich.store archive.memo.ru re-forma.ru rocket03.rocketlaunch.live simplifi.work kmaonline.school lodipremium.com pkk.memo.ru app.senhorpanda.com fond.memo.ru periodics.memo.ru wiki.archaeology-travel.com 1937.memo.ru archive-files.memo.ru new-live-staging.onlinenotary.net test.ittybitcdn.com snyrc.com ost-west.memo.ru donate-dev.memo.ru invest.ittybitcdn.com listsbook.memo.ru ittybitcdn.com konkurs.memo.ru samizdat.memo.ru rocket02.rocketlaunch.live decide.contpaqinube.com www.telephonenumberlookups.com win.betnumbers.gr www.in-stylefashion.de ru.in-stylefashion.de nkvd.memo.ru go.epublish4me.com epublish4me.com rarebooks.memo.ru bulletin.memo.ru memoirs.memo.ru stats.archaeology-travel.com prison-camps-1920s.memo.ru www.betnumbers.gr cathol.memo.ru uploads.ittybitcdn.com www.haosf.uk socialist.memo.ru histor-ipt-kt.memo.ru mos.memo.ru 1989.memo.ru oskolki.memo.ru kavkaz.memo.ru ocherk-prison-camps.memo.ru members.weshare.org api.bill.et app.onlinenotary.net staging10.meetachef.com webhook.npcdn.net www.canadapharmacydepot.com www.nipc.memo.ru nipc.memo.ru dissident.memo.ru basementescaperoom.com mail.miowifi.com development.onlinenotary.net newpages.npcdn.net staging7.meetachef.com unraid.nas.vg www.clearskiessa.com staging11.meetachef.com staging9.meetachef.com staging8.meetachef.com upload.ittybitcdn.com deliver.ittybitcdn.com d.ittybitcdn.com usmotorworks.mypartfinder.com files.ittybitcdn.com lists.memo.ru virtualdev.selfizee.fr eventest.selfizee.fr it.archaeology-travel.com dostup.memo.ru ngk.mypartfinder.com www.brassmonkey.co.uk cdntest.npcdn.net brassmonkey.co.uk home-d.topos.memo.ru blog.murphybeds.com stream.niknando.com prichina.memo.ru base.memo.ru www.base.memo.ru qbp.mypartfinder.com prenco.mypartfinder.com piecesarabais.mypartfinder.com transbec.mypartfinder.com stant.mypartfinder.com newtek.mypartfinder.com pentius.mypartfinder.com iljin.mypartfinder.com wa.memo.ru tiktok.niknando.com www.xplai.com ftpmanagerapi.mypartfinder.com fastdelphi.mypartfinder.com www.dissident.memo.ru www.lib.memo.ru backhome.memo.ru soc.memo.ru www.centersource.io 1968.memo.ru home.topos.memo.ru www.memo.ru www.jbrown.photography.cdn.cloudflare.net www.academicadvisers.com.hk re-base-edit.memo.ru ldk.memo.ru www.murphybeds.com niknando.com www.niknando.com new.murphybeds.com sync.selfizee.fr dealers.murphybeds.com images.insuranks.com super-finanzas.com admin.murphybeds.com dura-bond.mypartfinder.com delphi.mypartfinder.com sparta.mypartfinder.com seriesflix.id zfmexico.mypartfinder.com winhere.mypartfinder.com acefortoy.shop sig.mypartfinder.com adminer.mypartfinder.com betnumbers.gr academy.selfizee.fr tkstore.mypartfinder.com api.mypartfinder.com admin.mypartfinder.com bulaimage.com m.bulaimage.com cf.www.bulaimage.com gki.mypartfinder.com promecanix.mypartfinder.com hengst.mypartfinder.com tbdispatch.com demo.couponsclub.net ngkca.mypartfinder.com ngkca-mrlube.mypartfinder.com fsimf.com winstopbrakes.mypartfinder.com walter-dieban.de pci.mypartfinder.com www.altimax-trampoline.fr altimax-trampoline.fr cyberbrake.mypartfinder.com academicadvisers.com.hk cdn.animalsaustralia.org dns.mypartfinder.com jnpsoft.mypartfinder.com static.booth.selfizee.fr static-media-booth.selfizee.fr media.booth.selfizee.fr static-js-booth.selfizee.fr static-css-booth.selfizee.fr cdn.selfizee.fr www.selfizee.fr www.couponsclub.net couponsclub.net xplai.com akebonobrakes.mypartfinder.com melling.mypartfinder.com evolutiondriveline.mypartfinder.com everestwarehouse.mypartfinder.com fpd.mypartfinder.com cicparts.mypartfinder.com hellablades.mypartfinder.com rodatech.mypartfinder.com rbtech.mypartfinder.com hitachi.mypartfinder.com hellabulbs.mypartfinder.com deyac.mypartfinder.com hella.mypartfinder.com aisin.mypartfinder.com advics.mypartfinder.com app.mypartfinder.com m.siestablinds.com nipotalelero.xyz morrisfirewood.com deco4life.nl softwaregetcompany.com www.faithtelevision.ca lua.zapped.cc pgan.me mypartfinder.com mangak2.com visityarravalley.com.au nl.archaeology-travel.com w9.gy889a.com w8.gy889a.com w6.gy889a.com w7.gy889a.com g9.gy889a.com w5.gy889a.com w3.gy889a.com g8.gy889a.com w2.gy889a.com w1.gy889a.com g6.gy889a.com g7.gy889a.com g5.gy889a.com www.gy889a.com gy889a.com www.friendsofhabanos.com insuranks.com wokandfiretakeaway.com flightsxc.com www.danielfieldmailorder.co.uk activity2.onlinenotary.net in-stylefashion.de dev.insuranks.com chaplinsfishbar.co.uk www.verawangparty.com www.dorindadesign.nl www.horecakoelspullen.nl www.vetonlinecourses.com.cdn.cloudflare.net www.euroko.sk mail.miowifi.com.cdn.cloudflare.net www.fluper.com www.promobooking.it merrymen.io store.friendsofhabanos.com indeks.wspolczesna.pl promobooking.it www.vetonlinecourses.com canadapharmacydepot.com verawangparty.com www.nivito.fi dorindadesign.nl www.barbaraschwitzke.design fluper.com www.weshare.org systemu.selfizee.fr leclerc.selfizee.fr rgpd.selfizee.fr manager.selfizee.fr www.mail.miowifi.com euroko.sk nivito.fi www.miowifi.com staleks.su www.ucresidentbenefits.com thecannabispos.com weshare.org philanthropicbank.com danielfieldmailorder.co.uk randfonteinherald.co.za staging.onlinenotary.net avgapp.co www.barrysofdouglas.com barrysofdouglas.com golokalonline.co.uk staging6.meetachef.com nas.vg prtvmedia.online www.wspolczesna.pl wspolczesna.pl www.rooferfortlauderdale.com plprod74.fr ionaestates.com www.cybaker.co.uk agenda.lusalmon.com www.lusalmon.com www.onlinenotary.net notebookcheck.org support.socialdesk.io www.desertviewrecovery.com ignite.socialdesk.io startup.socialdesk.io roam.visityarravalley.com.au prod.visityarravalley.com.au assets.visityarravalley.com.au roam.visityarravalley.com.au.cdn.cloudflare.net assets.visityarravalley.com.au.cdn.cloudflare.net cdn.socialdesk.io console.socialdesk.io www.ishtarskinlights.com master.socialdesk.io www.socialdesk.io socialdesk.io www.bill.et bill.et www.emaintcmms.com emaintcmms.com motorsport.jbrown.photography safari.jbrown.photography www.jbrown.photography reallacare.com siestablinds.com www.siestablinds.com dev.socialdesk.io pre-prod.meetachef.com zapped.cc mijnmeubel.com goodaccountants.com desertviewrecovery.com estudosnacionais.com foreclosurewatch.com onlinenotary.net codyyellowstone.org denied.socialdesk.io livemore.me www.trainingwithandy.co.uk virtual.kpmgglobalevents.com www.juweirahotel.com medconcierge.com.br www.trvltrend.com trvltrend.com doc.selfizee.fr www.auladelenguacastellana.com.cdn.cloudflare.net myvip-1.xyz www.muzpic.com tenbest.deals prod.visityarravalley.com.au.cdn.cloudflare.net centersource.io www.tehnomaster.com tehnomaster.com www.fabness.com.au mybesttransfer.com ds3617.nas.vg emby.nas.vg bt.nas.vg staging5.meetachef.com staging4.meetachef.com mhlstudy.com huajibsq.cn.cdn.cloudflare.net www.knowledgeislearned.com.cdn.cloudflare.net carmila.selfizee.fr myevent.selfizee.fr booth.selfizee.fr staging.livemore.me www.macklems.com macklems.com muzpic.com kpmgglobalevents.com msg.findthecode.com.tr www.findthecode.com.tr www.militarybenefits.info screenfleet.com.au latticetraining.com join.goodaccountants.com arpumpsonline.com pop-app.online www.npcdn.net seabreezejamaicantakeaway.com rhone-dental-clinic.ch www.epublish4me.com allin.vikacg.cn dev.xeno.pk staging.desertviewrecovery.com dev.hornykinkyboy.com www.xeno.pk knee1.com www.knee1.com swpksa.clearskiessa.com boothdev.selfizee.fr production.onlinenotary.net cluefootball.com www.cluefootball.com militarybenefits.info www.glowtorchbeam.org glowtorchbeam.org staging.archaeology-travel.com egypt.escortnews.com www.estudosnacionais.com api.onlinenotary.net www.senhorpanda.com horecakoelspullen.nl esign.onlinenotary.net www.couponstrolley.com.au.cdn.cloudflare.net www.trainingwithandy.co.uk.cdn.cloudflare.net 2020visionsecurity1.xyz friendsofhabanos.com ishtarskinlights.com fdo.rocketlaunch.live staging3.meetachef.com es.archaeology-travel.com de.archaeology-travel.com fr.archaeology-travel.com contpaqinube.com www.codyyellowstone.org xeno.pk ambienceexpress.co.uk jethustlers.com clearskiessa.com virtual.lpderecho.pe www.freethink.com www.halo.co.in inversioninteligentemexico.com community.hornykinkyboy.com freethink.com moolabchesterfield.co.uk staging.meetachef.com staging2.meetachef.com acpt.moodntone.com.cdn.cloudflare.net devfdo.rocketlaunch.live www.excaliburinsurance.ca rocketlaunch.live behappyrestaurant.com dev.rocketlaunch.live www.restructurebusinessdebt.com nuevo.mbenz.expert dev.mbenz.expert w.mbenz.expert www.rebecagreciano.com.cdn.cloudflare.net vulkan-24.click www.9dxs.net.cdn.cloudflare.net www.rocketlaunch.live restructurebusinessdebt.com juweirahotel.com twarmehuisje.nl ucresidentbenefits.com ostomixx.com deluierbakker.nl vv88chn.com goedinverf.nl faithtelevision.ca plantenverkoop.eu yourfairchair.nl stijl-junkie.nl hipenlau.nl delevensboom-olen.be w88w982.com brycekerley.net royalbaltionline.com rooferfortlauderdale.com rdslot777.org howardluksmd.com bw9.wingroup.xyz uwsg9.wingroup.xyz www.howardluksmd.com lpderecho.pe www.protanusa.com protanusa.com france.archaeology-travel.com ambio-media.com u7b3.wingroup.xyz 23ace3.wingroup.xyz vw2.wingroup.xyz www.fuckyihang.xyz.cdn.cloudflare.net fuckyihang.xyz.cdn.cloudflare.net vn2.wingroup.xyz fabness.com.au www.fuckyihang.xyz fuckyihang.xyz barbaraschwitzke.design.cdn.cloudflare.net senhorpanda.com wingroup.xyz cpcontacts.wingroup.xyz www.wingroup.xyz cpcalendars.wingroup.xyz www.archaeology-travel.com archaeology-travel.com animalsaustralia.org thekalpi.com feed.ncdn.xyz sandbox2.wingroup.xyz sandbox.wingroup.xyz www.solechuvacipatex.com.br cyprus.escortnews.com vw.wingroup.xyz artisanaltastemeals.com campcdn.com mx.wingroup.xyz uwsg2.wingroup.xyz 23ace.wingroup.xyz mx2.wingroup.xyz u7a2.wingroup.xyz mw2.wingroup.xyz aw.wingroup.xyz u7a.wingroup.xyz u7b.wingroup.xyz bw2.wingroup.xyz uw.wingroup.xyz cdn2.npcdn.net staging.fabness.com.au neblotech.com scss.npcdn.net
Malware Detected on Host
Count: 4 595bafcac1ad3b716140c95a703cf9184c4316255e587ff8db38a8c4abe0a153 e0c0b8e5165e1e6edc22a4de2d25f2da8413bf61ca2a89e24d22e2920c46c253 fabd511736efa63e63d055e5de1b072d5ec8438c63eb519560a2dd87e0da0f0f 53239bea3d5bd4c971f5080361cce26e11e2e77a04039b5aa36b5958c07ae26d
Open Ports Detected
2052 2053 2082 2083 2086 2087 443 80 8080 8443 8880
Map
Whois Information
- NetRange: 104.16.0.0 - 104.31.255.255
- CIDR: 104.16.0.0/12
- NetName: CLOUDFLARENET
- NetHandle: NET-104-16-0-0-1
- Parent: NET104 (NET-104-0-0-0-0)
- NetType: Direct Allocation
- OriginAS: AS13335
- Organization: Cloudflare, Inc. (CLOUD14)
- RegDate: 2014-03-28
- Updated: 2024-09-04
- Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
- Comment: Geofeed: https://api.cloudflare.com/local-ip-ranges.csv
- Ref: https://rdap.arin.net/registry/ip/104.16.0.0
- OrgName: Cloudflare, Inc.
- OrgId: CLOUD14
- Address: 101 Townsend Street
- City: San Francisco
- StateProv: CA
- PostalCode: 94107
- Country: US
- RegDate: 2010-07-09
- Updated: 2024-11-25
- Ref: https://rdap.arin.net/registry/entity/CLOUD14
- OrgNOCHandle: CLOUD146-ARIN
- OrgNOCName: Cloudflare-NOC
- OrgNOCPhone: +1-650-319-8930
- OrgNOCEmail: noc@cloudflare.com
- OrgNOCRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
- OrgAbuseHandle: ABUSE2916-ARIN
- OrgAbuseName: Abuse
- OrgAbusePhone: +1-650-319-8930
- OrgAbuseEmail: abuse@cloudflare.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
- OrgRoutingHandle: CLOUD146-ARIN
- OrgRoutingName: Cloudflare-NOC
- OrgRoutingPhone: +1-650-319-8930
- OrgRoutingEmail: noc@cloudflare.com
- OrgRoutingRef: https://rdap.arin.net/registry/entity/CLOUD146-ARIN
- OrgTechHandle: ADMIN2521-ARIN
- OrgTechName: Admin
- OrgTechPhone: +1-650-319-8930
- OrgTechEmail: rir@cloudflare.com
- OrgTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
- RNOCHandle: NOC11962-ARIN
- RNOCName: NOC
- RNOCPhone: +1-650-319-8930
- RNOCEmail: noc@cloudflare.com
- RNOCRef: https://rdap.arin.net/registry/entity/NOC11962-ARIN
- RAbuseHandle: ABUSE2916-ARIN
- RAbuseName: Abuse
- RAbusePhone: +1-650-319-8930
- RAbuseEmail: abuse@cloudflare.com
- RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2916-ARIN
- RTechHandle: ADMIN2521-ARIN
- RTechName: Admin
- RTechPhone: +1-650-319-8930
- RTechEmail: rir@cloudflare.com
- RTechRef: https://rdap.arin.net/registry/entity/ADMIN2521-ARIN
Links to attack logs
anonymous-proxy-ip-list-2025-06-23 anonymous-proxy-ip-list-2025-06-22 anonymous-proxy-ip-list-2025-06-24
Share on: