104.21.64.1
Classification: Whitelisted
104.21.64.1 is a whitelisted (trusted) IP address. Reported by 3 threat sources, last seen 2026-09-03. Network: AS13335 Cloudflare, Inc..
Current activity
- Content Delivery Network — Belongs to a CDN with many allocated resources.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Matched whitelist source: Cloudflare | Maltiverse | 2026-07-07 08:17:35 | 2026-09-03 01:09:33 | benign | |
| Lumma Stealer | MalwarePatrol | 2026-03-03 18:10:55 | 2026-03-03 18:10:55 | malicious-activity | S1213 Lumma Stealer |
| Hook | ThreatFox Abuse.ch | 2025-02-14 19:17:43 | 2025-02-15 12:19:46 | malicious-activity |
Tags
hookbot panel port:80 stealer lumma stealer lummac2 stealer tor-nodeWhois information
- AS name
- AS13335 Cloudflare, Inc.
- AS registry
- arin
- AS date
- 2014-03-28 00:00:00
- AS CIDR
- 104.21.64.0/20
- CIDR
- 104.16.0.0/12
- Registrant
- Cloudflare, Inc.
- Address
- 101 Townsend Street
- City
- San Francisco
- State
- CA
- Postal code
- 94102
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2025-02-14 19:17:43
- Last updated
- 2026-09-03 01:09:33