104.20.209.21
Classification: Whitelisted
104.20.209.21 is a whitelisted (trusted) IP address. Reported by 3 threat sources, last seen 2026-07-24. Network: AS13335 Cloudflare, Inc..
Current activity
- Content Delivery Network — Belongs to a CDN with many allocated resources.
- Hosting provider — Shared hosting infrastructure.
Blacklist sightings showing the 100 most recent of 118
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Matched whitelist source: Cloudflare | Maltiverse | 2026-07-24 09:16:42 | 2026-07-24 09:16:42 | benign | |
| Gen:Trojan.Heur.AC1@xCNFE | Hybrid-Analysis | 2019-09-18 17:30:09 | 2019-09-18 17:30:09 | ||
| virus.bat.powershell | Hybrid-Analysis | 2019-09-18 16:30:15 | 2019-09-18 16:30:15 | ||
| X97M.Obfus.Gen | Hybrid-Analysis | 2019-03-25 12:15:13 | 2019-09-18 11:15:08 | ||
| Generic.Malware | Hybrid-Analysis | 2018-04-15 17:15:16 | 2019-09-17 05:15:08 | ||
| Trojan.Johnnie | Hybrid-Analysis | 2019-09-08 19:00:08 | 2019-09-08 19:00:08 | ||
| Exploit.OLE | Hybrid-Analysis | 2019-09-06 20:00:12 | 2019-09-06 20:00:12 | ||
| malicious.moderate.ml | Hybrid-Analysis | 2019-01-31 19:17:03 | 2019-09-06 19:45:04 | ||
| Generic.MSIL.DownloaderB | Hybrid-Analysis | 2018-04-18 14:15:21 | 2019-09-02 12:45:06 | ||
| Trojan.Encoder | Hybrid-Analysis | 2019-09-01 13:00:04 | 2019-09-01 13:00:04 | ||
| Agent | Hybrid-Analysis | 2019-08-29 08:00:05 | 2019-08-29 08:00:09 | ||
| Autoit.DecData | Hybrid-Analysis | 2019-08-22 06:00:11 | 2019-08-22 06:00:11 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2018-07-15 23:30:27 | 2019-08-21 16:45:16 | ||
| Trojan.Script.Heuristic | Hybrid-Analysis | 2019-08-20 23:15:07 | 2019-08-20 23:15:07 | ||
| Gen:Heur.MSIL.Inject | Hybrid-Analysis | 2019-08-20 10:00:15 | 2019-08-20 10:00:17 | ||
| Gen:Trojan.Heur.QC3@xCNFE | Hybrid-Analysis | 2019-08-20 08:00:08 | 2019-08-20 08:00:09 | ||
| Kryptik.GIFY | Hybrid-Analysis | 2019-07-28 23:00:09 | 2019-08-16 01:15:08 | ||
| Trojan.Script | Hybrid-Analysis | 2019-03-19 16:17:12 | 2019-08-13 17:30:04 | ||
| TrojanDownloader.Small | Hybrid-Analysis | 2019-08-12 15:15:09 | 2019-08-12 15:15:10 | ||
| Malicious site | Hybrid-Analysis | 2018-06-25 21:45:14 | 2019-08-12 14:00:13 | ||
| ATRAPS.Gen | Hybrid-Analysis | 2019-08-11 07:17:06 | 2019-08-11 07:17:06 | ||
| Macro.Downloader.MRKQ | Hybrid-Analysis | 2019-08-02 08:45:07 | 2019-08-08 13:45:27 | ||
| Malware.Generic | Hybrid-Analysis | 2019-08-07 20:45:30 | 2019-08-07 20:45:30 | ||
| Casur.A | Hybrid-Analysis | 2019-08-07 08:45:06 | 2019-08-07 08:45:06 | ||
| AGEN.1040462 | Hybrid-Analysis | 2019-08-06 15:15:35 | 2019-08-06 15:15:44 | ||
| Gen:Variant.MSILPerseus | Hybrid-Analysis | 2018-09-09 16:30:08 | 2019-08-06 10:45:11 | ||
| Trojan.MSIL | Hybrid-Analysis | 2019-08-06 04:15:09 | 2019-08-06 04:15:10 | ||
| Trojan.Swisyn | Hybrid-Analysis | 2019-08-03 08:15:05 | 2019-08-03 08:15:05 | ||
| Trojan.VBA | Hybrid-Analysis | 2019-07-31 09:16:36 | 2019-07-31 09:16:38 | ||
| Malware site | Hybrid-Analysis | 2019-01-07 02:15:05 | 2019-07-25 17:30:12 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-05-02 02:30:11 | 2019-07-25 15:45:20 | ||
| VBS.ObfDldr.13 | Hybrid-Analysis | 2019-07-16 22:00:14 | 2019-07-16 22:00:16 | ||
| Trojan.Wacatac | Hybrid-Analysis | 2019-07-14 22:45:04 | 2019-07-14 22:45:06 | ||
| Java.Trojan.GenericGB | Hybrid-Analysis | 2018-11-05 01:15:06 | 2019-07-13 03:30:14 | ||
| Malware.Heuristic | Hybrid-Analysis | 2019-07-07 18:15:05 | 2019-07-07 18:15:05 | ||
| Dldr.Script | Hybrid-Analysis | 2019-07-06 15:30:11 | 2019-07-06 15:30:11 | ||
| GdSda.A | Hybrid-Analysis | 2019-07-03 23:30:04 | 2019-07-03 23:30:04 | ||
| BehavesLike.Downloader | Hybrid-Analysis | 2019-06-21 14:30:04 | 2019-06-21 14:30:06 | ||
| RL_Generic.R269943 | Hybrid-Analysis | 2019-06-18 04:30:05 | 2019-06-18 04:30:08 | ||
| BehavesLike.Generic | Hybrid-Analysis | 2019-06-09 19:45:05 | 2019-06-09 19:45:06 | ||
| QVM201.0.B70B.Malware | Hybrid-Analysis | 2019-06-09 12:30:09 | 2019-06-09 12:30:13 | ||
| Backdoor.MSIL.Agent | Hybrid-Analysis | 2019-06-07 01:45:11 | 2019-06-07 01:45:11 | ||
| Artemis | Hybrid-Analysis | 2019-06-02 15:00:06 | 2019-06-02 15:00:13 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2018-06-22 12:15:26 | 2019-05-18 13:45:05 | ||
| Kryptik.GIFQ | Hybrid-Analysis | 2019-05-16 01:30:07 | 2019-05-16 01:30:08 | ||
| Trojan.PowerShell | Hybrid-Analysis | 2019-05-14 22:00:44 | 2019-05-14 22:01:00 | ||
| Dldr.PirateMatryoshka | Hybrid-Analysis | 2019-05-12 21:30:05 | 2019-05-12 21:30:06 | ||
| Coinminer.MSIL.LIMERAT | Hybrid-Analysis | 2019-05-12 21:00:13 | 2019-05-12 21:00:13 | ||
| BehavesLike.Injector | Hybrid-Analysis | 2019-05-07 16:15:33 | 2019-05-07 16:15:33 | ||
| Malicious_confidence_80% | Hybrid-Analysis | 2019-04-13 20:30:04 | 2019-04-13 20:30:04 | ||
| VB:Trojan.Valyria | Hybrid-Analysis | 2019-04-12 18:00:07 | 2019-04-12 18:00:07 | ||
| HEUR:AdWare.Generic | Hybrid-Analysis | 2019-04-07 17:45:05 | 2019-04-07 17:45:06 | ||
| Generic.MSIL.Bladabindi | Hybrid-Analysis | 2019-04-01 22:15:04 | 2019-04-01 22:15:05 | ||
| Trojan.KillProc | Hybrid-Analysis | 2019-03-30 19:30:04 | 2019-03-30 19:30:04 | ||
| Trojan.Indiloadz | Hybrid-Analysis | 2018-12-20 04:15:06 | 2019-03-30 03:17:05 | ||
| Gen:Heur.BZC.ONG.Boxter.81 | Hybrid-Analysis | 2019-03-25 12:15:12 | 2019-03-25 12:15:12 | ||
| Dropper.Gen | Hybrid-Analysis | 2019-03-22 15:00:45 | 2019-03-24 19:15:06 | ||
| Gen:Heur.BZC.YAX.Pantera.10 | Hybrid-Analysis | 2019-03-22 22:45:04 | 2019-03-22 22:45:09 | ||
| BehavesLike.JS.Nemucod | Hybrid-Analysis | 2019-03-22 05:45:16 | 2019-03-22 05:45:20 | ||
| Gen:Heur.MSIL.Krypt | Hybrid-Analysis | 2019-03-21 20:45:11 | 2019-03-21 20:45:11 | ||
| HEUR:Trojan.MSIL.Tasker | Hybrid-Analysis | 2019-03-21 16:30:33 | 2019-03-21 16:30:36 | ||
| Downloader.bfs | Hybrid-Analysis | 2019-03-20 05:00:04 | 2019-03-21 00:30:05 | ||
| Hacktool | Hybrid-Analysis | 2019-03-20 19:30:14 | 2019-03-20 19:30:14 | ||
| virus.office.qexvmc | Hybrid-Analysis | 2019-03-19 21:00:21 | 2019-03-19 21:00:22 | ||
| Trojan.Tasker | Hybrid-Analysis | 2019-03-18 14:15:24 | 2019-03-18 14:15:24 | ||
| W97m.Downloader | Hybrid-Analysis | 2019-03-14 13:30:27 | 2019-03-14 13:30:28 | ||
| Gen:Variant.Kazy | Hybrid-Analysis | 2018-10-15 16:15:05 | 2019-03-14 00:45:06 | ||
| susp.rtf.objupdate | Hybrid-Analysis | 2019-03-12 10:30:38 | 2019-03-12 10:30:38 | ||
| AGEN.1029054 | Hybrid-Analysis | 2019-03-09 23:15:10 | 2019-03-09 23:15:10 | ||
| GenericRXEV-CH | Hybrid-Analysis | 2019-03-08 00:00:05 | 2019-03-08 00:00:06 | ||
| HEUR.VBA.Trojan | Hybrid-Analysis | 2019-02-25 18:45:21 | 2019-02-25 18:45:22 | ||
| Dropper.Trojan.Generic | Hybrid-Analysis | 2019-02-24 12:00:05 | 2019-02-24 12:00:09 | ||
| Trojan.CoinMiner | Hybrid-Analysis | 2019-02-24 00:00:11 | 2019-02-24 00:00:11 | ||
| VBA.Trojan | Hybrid-Analysis | 2019-02-11 21:00:11 | 2019-02-11 21:00:11 | ||
| AGEN.1029942 | Hybrid-Analysis | 2019-02-11 13:00:11 | 2019-02-11 13:00:11 | ||
| HEUR:Trojan.MSOffice.Stratos | Hybrid-Analysis | 2019-01-29 01:30:04 | 2019-01-29 01:30:05 | ||
| Trojan.Linux | Hybrid-Analysis | 2019-01-22 08:15:10 | 2019-01-22 08:15:10 | ||
| HT_CRYPSTAMPADO_GB010012.UVPM | Hybrid-Analysis | 2019-01-20 00:45:03 | 2019-01-20 00:45:03 | ||
| Trojan.MCJD | Hybrid-Analysis | 2019-01-14 18:15:08 | 2019-01-14 18:15:08 | ||
| Phishing site | Hybrid-Analysis | 2019-01-06 11:45:03 | 2019-01-06 11:45:05 | ||
| Gen:Variant.Barys | Hybrid-Analysis | 2019-01-04 11:45:04 | 2019-01-04 11:45:04 | ||
| Malware | Hybrid-Analysis | 2018-04-07 23:45:20 | 2019-01-03 14:30:04 | ||
| AIT:Trojan.Nymeria | Hybrid-Analysis | 2018-12-14 20:00:08 | 2019-01-02 05:00:05 | ||
| Static engine | Hybrid-Analysis | 2018-12-27 00:45:03 | 2018-12-27 00:45:04 | ||
| Indiloadz.BB | Hybrid-Analysis | 2018-12-26 11:45:03 | 2018-12-26 11:45:03 | ||
| Gen:Heur.Ransom.REntS.Gen | Hybrid-Analysis | 2018-12-01 07:15:06 | 2018-12-01 07:15:06 | ||
| malicious.high.ml | Hybrid-Analysis | 2018-11-28 00:45:05 | 2018-11-28 00:45:05 | ||
| suspicious.low.ml | Hybrid-Analysis | 2018-11-26 00:30:06 | 2018-11-26 00:30:06 | ||
| Trojan.Ekstak | Hybrid-Analysis | 2018-11-15 18:30:07 | 2018-11-15 18:30:08 | ||
| Gen:Variant.Ursu | Hybrid-Analysis | 2018-05-14 08:45:18 | 2018-10-31 15:15:13 | ||
| Gen:Variant.Johnnie | Hybrid-Analysis | 2018-10-28 21:45:17 | 2018-10-28 21:45:17 | ||
| Trojan.Agent | Hybrid-Analysis | 2018-10-03 07:45:05 | 2018-10-03 07:45:07 | ||
| Linux.Agent | Hybrid-Analysis | 2018-09-17 15:30:15 | 2018-09-17 15:30:41 | ||
| Gen:Variant.Cerbu | Hybrid-Analysis | 2018-09-01 05:45:09 | 2018-09-01 05:45:09 | ||
| QVM03.0.5621.Malware | Hybrid-Analysis | 2018-08-21 20:45:29 | 2018-08-21 20:45:29 | ||
| HEUR:Backdoor.MSIL | Hybrid-Analysis | 2018-08-08 11:46:43 | 2018-08-19 11:17:10 | ||
| Phishing | Phishtank | 2018-07-02 08:41:50 | 2018-07-02 08:41:50 | ||
| Dropper.Binder | Hybrid-Analysis | 2018-06-26 07:01:27 | 2018-06-26 07:01:29 | ||
| HEUR:Trojan.MSIL | Hybrid-Analysis | 2018-06-06 00:45:08 | 2018-06-06 00:45:08 | ||
| FileRepMalware | Hybrid-Analysis | 2018-05-08 10:45:11 | 2018-05-08 10:45:11 |
Tags
rat autoit banker bladabindi evasive njrat miner phishingWhois information
- AS name
- AS13335 Cloudflare, Inc.
- AS registry
- arin
- AS date
- 2014-03-28 00:00:00
- AS CIDR
- 104.20.208.0/20
- CIDR
- 104.16.0.0/12
- Registrant
- Cloudflare, Inc.
- Address
- 101 Townsend Street
- City
- San Francisco
- State
- CA
- Postal code
- 94102
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2017-10-21 16:01:48
- Last updated
- 2026-07-24 09:16:42