104.16.85.20
Classification: Whitelisted
104.16.85.20 is a whitelisted (trusted) IP address. Reported by 4 threat sources, last seen 2026-07-24. Network: AS13335 Cloudflare, Inc..
Current activity
- Content Delivery Network — Belongs to a CDN with many allocated resources.
- Hosting provider — Shared hosting infrastructure.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Matched whitelist source: Cloudflare | Maltiverse | 2026-07-24 09:17:10 | 2026-07-24 09:17:10 | benign | |
| Malware | Hybrid-Analysis | 2021-06-01 13:45:39 | 2022-01-25 07:30:21 | ||
| Malware site | Hybrid-Analysis | 2018-05-18 20:15:06 | 2022-01-21 11:45:30 | ||
| Phishing site | Hybrid-Analysis | 2018-06-18 03:45:27 | 2022-01-18 20:45:14 | ||
| Malicious site | Hybrid-Analysis | 2018-09-05 17:31:08 | 2022-01-16 18:45:41 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2022-01-14 19:45:12 | 2022-01-14 19:45:19 | ||
| JS:Trojan.Cryxos | Hybrid-Analysis | 2021-09-07 01:00:19 | 2021-11-23 09:45:45 | ||
| ml.Generic | Hybrid-Analysis | 2021-11-11 10:00:17 | 2021-11-11 10:00:19 | ||
| Trojan.Disco | Hybrid-Analysis | 2021-11-09 20:00:12 | 2021-11-09 20:00:17 | ||
| Win64:Malware | Hybrid-Analysis | 2021-10-28 22:01:27 | 2021-10-28 22:01:32 | ||
| Phishing.JS | Hybrid-Analysis | 2021-06-24 14:15:30 | 2021-09-20 06:45:21 | ||
| Phishing.BNR | Hybrid-Analysis | 2021-07-13 22:00:15 | 2021-08-07 06:00:13 | ||
| Gen:Variant.Application.Bundler.Somoto | Hybrid-Analysis | 2021-07-31 04:30:14 | 2021-07-31 04:30:20 | ||
| JS:Phishing | Hybrid-Analysis | 2021-07-14 20:45:06 | 2021-07-14 20:45:11 | ||
| HTML:PhishingMail | Hybrid-Analysis | 2021-07-13 21:15:39 | 2021-07-13 21:15:45 | ||
| Trojan.Reconyc | Hybrid-Analysis | 2021-07-09 18:00:18 | 2021-07-09 18:00:19 | ||
| Phishing.gen | Hybrid-Analysis | 2021-06-03 14:45:36 | 2021-06-03 14:45:42 | ||
| Generic.Malware | Hybrid-Analysis | 2018-08-29 14:17:15 | 2021-04-30 02:15:16 | ||
| Phish.AI.gen | Hybrid-Analysis | 2021-04-16 08:30:24 | 2021-04-16 08:30:24 | ||
| Phishing.PDF | Hybrid-Analysis | 2021-03-03 08:00:49 | 2021-03-03 08:00:51 | ||
| Probably Heur.HTMLUnescape | Hybrid-Analysis | 2021-02-04 01:00:25 | 2021-03-01 19:16:15 | ||
| Miner.bp | Hybrid-Analysis | 2021-02-06 05:15:18 | 2021-02-06 05:15:26 | ||
| Adware.Agent | Hybrid-Analysis | 2021-01-22 14:45:30 | 2021-01-22 14:45:30 | ||
| HTML:PhishingMS | Hybrid-Analysis | 2020-10-16 18:30:36 | 2020-10-20 19:15:09 | ||
| Phishing.S23 | Hybrid-Analysis | 2020-08-06 16:00:13 | 2020-08-06 16:00:16 | ||
| Ransomware,maze,guloader,rat | C-CIR-T | 2020-07-04 14:12:26 | 2020-07-04 14:12:49 | ||
| Hoax.JS.Phish | Hybrid-Analysis | 2020-05-12 13:45:31 | 2020-05-17 10:30:12 | ||
| Hoax.HTML.Phish | Hybrid-Analysis | 2020-04-20 17:45:16 | 2020-04-22 20:00:11 | ||
| Malware | IBM X-Force Exchange | 2019-12-28 00:26:00 | 2019-12-28 00:26:00 | ||
| Trojan.Generic | Hybrid-Analysis | 2019-11-04 01:30:06 | 2019-11-04 01:30:06 | ||
| BehavesLike.Suspicious | Hybrid-Analysis | 2019-01-13 15:30:12 | 2019-01-13 15:30:13 | ||
| miner | Maltiverse | 2017-10-17 19:33:02 | 2017-10-17 19:33:02 |
Whois information
- AS name
- AS13335 Cloudflare, Inc.
- AS registry
- arin
- AS date
- 2014-03-28 00:00:00
- AS CIDR
- 104.16.80.0/20
- CIDR
- 104.16.0.0/12
- Registrant
- Cloudflare, Inc.
- Address
- 101 Townsend Street
- City
- San Francisco
- State
- CA
- Postal code
- 94102
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2017-10-17 19:33:02
- Last updated
- 2026-07-24 09:17:10