104.18.20.226

Classification: Whitelisted

104.18.20.226 is a whitelisted (trusted) IP address. Reported by 3 threat sources, last seen 2026-07-23. Network: AS13335 Cloudflare, Inc..

Current activity

  • Content Delivery Network — Belongs to a CDN with many allocated resources.
  • Hosting provider — Shared hosting infrastructure.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Matched whitelist source: Cloudflare Maltiverse 2026-06-20 10:40:06 2026-07-23 08:02:38 benign
OCSP IP Maltiverse 2024-03-20 13:39:24 2025-06-18 08:35:21
Phishing site Hybrid-Analysis 2018-10-29 08:15:14 2022-01-17 08:15:32
Malicious site Hybrid-Analysis 2018-08-31 15:30:14 2022-01-15 04:17:07
CVE-2018-8453 Hybrid-Analysis 2021-12-21 10:01:15 2021-12-21 10:01:15
Generic.Ransom.Sodinokibi Hybrid-Analysis 2021-12-21 10:01:02 2021-12-21 10:01:02
Riskware.SafeCleaner Hybrid-Analysis 2021-08-26 00:15:41 2021-08-26 00:15:41
Anomalous.95% Hybrid-Analysis 2021-08-24 18:00:24 2021-08-24 18:00:24
Generic.Malware Hybrid-Analysis 2018-07-15 10:45:19 2021-03-29 03:15:46
lockbit .BEware 2021-03-11 09:06:38 2021-03-11 09:06:38
DFI Hybrid-Analysis 2021-01-06 14:00:56 2021-01-06 14:00:56
Program.Freemake Hybrid-Analysis 2020-06-30 20:30:14 2020-06-30 20:30:14
Downloader.Ubot Hybrid-Analysis 2020-06-14 23:30:05 2020-06-14 23:30:05
Trojan.Generic Hybrid-Analysis 2019-01-05 09:45:04 2020-05-31 03:15:07
Trojan.Biodata Hybrid-Analysis 2020-03-18 14:30:18 2020-05-29 22:45:14
Unsafe.AI_Score_54% Hybrid-Analysis 2020-04-30 07:15:53 2020-04-30 07:15:53
Gen:Variant.Johnnie Hybrid-Analysis 2020-04-21 09:45:14 2020-04-21 09:45:14
HEUR:Trojan.Script.Startup Hybrid-Analysis 2020-04-02 07:00:51 2020-04-02 07:00:51
Application.Bundler Hybrid-Analysis 2020-03-25 20:45:23 2020-03-25 20:45:23
RemoteAdmin.RevCode Hybrid-Analysis 2020-03-21 03:00:43 2020-03-21 03:00:43
Trojan.Inject Hybrid-Analysis 2020-03-14 05:45:22 2020-03-14 05:45:22
/Suspicious Hybrid-Analysis 2020-03-01 01:45:06 2020-03-01 01:45:06
SigAdware.OOOOnlineCenter Hybrid-Analysis 2020-02-27 15:45:12 2020-02-27 15:45:12
Virus.Adware Hybrid-Analysis 2019-10-22 08:15:17 2019-10-22 08:15:17
Trojan.Agent Hybrid-Analysis 2019-09-13 07:30:17 2019-09-13 07:30:17
Crack.b03567da Hybrid-Analysis 2019-06-06 19:30:15 2019-06-06 19:30:15
Gen:Trojan.Heur.LP Hybrid-Analysis 2019-05-07 05:15:24 2019-05-07 05:15:24
Program.Itva Hybrid-Analysis 2019-04-11 07:30:33 2019-04-11 07:30:34
InstallCore Hybrid-Analysis 2019-03-28 15:30:26 2019-03-28 15:30:26
Bundled.Toolbar.Google Hybrid-Analysis 2019-02-20 02:45:06 2019-02-20 02:45:06
Dropper.Gen2 Hybrid-Analysis 2019-02-05 07:00:09 2019-02-05 07:00:30
TROJ_FRS.0NZ900A419 Hybrid-Analysis 2019-01-04 14:45:16 2019-01-04 14:45:17
Sality.gen Hybrid-Analysis 2018-12-30 15:45:10 2018-12-30 15:45:12
Gen:Variant.Zusy Hybrid-Analysis 2018-12-24 15:15:23 2018-12-24 15:15:23
Trojan.Script.Heuristic Hybrid-Analysis 2018-12-17 07:45:11 2018-12-17 07:45:12
Generic.Ransom.GandCrab4 Hybrid-Analysis 2018-12-05 11:45:20 2018-12-05 11:45:21
Trojan.OpenCandy Hybrid-Analysis 2018-11-10 12:15:04 2018-11-10 12:15:04
W32.Adware Hybrid-Analysis 2018-11-02 14:30:49 2018-11-02 14:30:49
FileRepMalware Hybrid-Analysis 2018-10-26 14:15:16 2018-10-26 14:15:17
Faceliker.A Hybrid-Analysis 2018-10-03 05:15:19 2018-10-03 05:15:19

Tags

lockbit ransomware

Whois information

AS name
AS13335 Cloudflare, Inc.
AS registry
arin
AS date
2014-03-28 00:00:00
AS CIDR
104.18.16.0/20
CIDR
104.16.0.0/12
Registrant
Cloudflare, Inc.
Address
101 Townsend Street
City
San Francisco
State
CA
Postal code
94102
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected], [email protected]
First indexed
2018-07-15 10:45:19
Last updated
2026-07-23 08:02:38