172.67.130.222

Classification: Whitelisted

172.67.130.222 is a whitelisted (trusted) IP address. Reported by 3 threat sources, last seen 2026-08-01. Network: AS13335 Cloudflare, Inc..

Current activity

  • Content Delivery Network β€” Belongs to a CDN with many allocated resources.
  • Hosting provider β€” Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Matched whitelist source: Cloudflare Maltiverse 2026-08-01 01:15:46 2026-08-01 01:15:46 benign
Cobalt Strike ThreatFox Abuse.ch 2022-07-12 23:18:26 2022-07-12 23:18:26 malicious-activity S0154 Cobalt Strike
Phishing Maltiverse 2022-05-13 12:40:18 2022-05-13 12:40:18 compromised
PAYPAL phishing Antiphishing.com.ar 2020-05-29 02:58:25 2020-05-29 02:58:25

Tags

cobaltstrike agentemis beacon phishing

Whois information

AS name
AS13335 Cloudflare, Inc.
AS registry
arin
AS date
2015-02-25 00:00:00
AS CIDR
172.67.128.0/20
CIDR
172.64.0.0/13
Registrant
Cloudflare, Inc.
Address
101 Townsend Street
City
San Francisco
State
CA
Postal code
94102
Country
US β€” United States πŸ‡ΊπŸ‡Έ
Contact email
[email protected], [email protected], [email protected]
First indexed
2020-05-29 02:58:25
Last updated
2026-08-01 01:15:46