104.20.68.143
Classification: Whitelisted
104.20.68.143 is a whitelisted (trusted) IP address. Reported by 2 threat sources, last seen 2026-07-24. Network: AS13335 Cloudflare, Inc..
Current activity
- Content Delivery Network — Belongs to a CDN with many allocated resources.
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: NJRAT (S0385)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Matched whitelist source: Cloudflare | Maltiverse | 2026-07-24 09:17:13 | 2026-07-24 09:17:13 | benign | |
| NjRAT | ThreatFox Abuse.ch | 2023-09-27 22:49:11 | 2023-09-29 13:50:41 | malicious-activity | S0385 njRAT |
| Malware | Maltiverse | 2019-12-17 06:47:00 | 2022-04-18 12:47:00 | ||
| Cryptocurrency Mining | Maltiverse | 2019-12-12 17:54:00 | 2022-04-18 12:47:00 | ||
| Anonymisation Services | Maltiverse | 2019-12-17 06:47:00 | 2020-01-17 09:09:00 |
Tags
c2 historicalandnew njrat port:54077 bladabindi lime-wormWhois information
- AS name
- AS13335 Cloudflare, Inc.
- AS registry
- arin
- AS date
- 2014-03-28 00:00:00
- AS CIDR
- 104.20.64.0/20
- CIDR
- 104.16.0.0/12
- Registrant
- Cloudflare, Inc.
- Address
- 101 Townsend Street
- City
- San Francisco
- State
- CA
- Postal code
- 94102
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2022-05-02 20:34:55
- Last updated
- 2026-07-24 09:17:13