104.20.208.67

Classification: Whitelisted

104.20.208.67 is a whitelisted (trusted) IP address listed by Maltiverse. 4 sightings from Hybrid-Analysis and Telefonica Peru, last seen 2026-10-15.

Current activity

  • Content Delivery Network — Belongs to a CDN with many allocated resources.

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Matched whitelist source: Cloudflare Maltiverse 2026-07-19 17:16:56 2026-10-15 22:33:08 benign
Malicious site Hybrid-Analysis 2021-07-06 20:00:06 2021-07-06 20:00:06
Ransomware Revil Sodinokibi Telefonica Peru 2020-08-04 14:13:39 2020-08-04 14:13:39
Ransomware, Sodinokibi, Revil Telefonica Peru 2020-08-04 14:11:38 2020-08-04 14:11:38
DeepScan:Generic.Ransom.Sodinokibi Hybrid-Analysis 2020-03-11 14:17:23 2020-03-11 14:17:23 S0496 REvil

Tags

ransomware sodinokibi revil telecom argentina

Whois information

AS name
AS13335 Cloudflare, Inc.
AS registry
arin
AS date
2014-03-28 00:00:00
AS CIDR
104.20.208.0/20
CIDR
104.16.0.0/12
Registrant
CloudFlare, inc.
Address
101 Townsend Street
City
San Francisco
State
CA
Postal code
94119
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected], [email protected]
First indexed
2020-03-11 14:17:23
Last updated
2026-10-15 22:33:08