104.18.178.120
Intelligence Briefing: 104.18.178.120
Identity and Infrastructure
The IP address 104.18.178.120 was identified as a Cloudflare CDN node associated with ASN 13335 (CLOUDFLARENET). The address resolved to a TLS certificate for the domain elementor.com issued by Let's Encrypt.
Threat Assessment
The system classified the reputation as "Low Risk" with an overall risk score of 30. No specific threat indicators, known campaigns, or active attacker classifications were detected. However, the address was listed on one of eight total DNSBLs. Control plane analysis indicated the subnet was not stable and presented a moderate risk level.
Technical Observations
The target exposed TCP ports 80, 443, 8080, and 8443. Geolocation data presented a contradiction, with sources disagreeing between the United States and Canada. The IP was observed in the network neighborhood 104.18.178.120/24, which was classified as "clean" with zero threat siblings.
Recommendation
Based on the moderate risk classification and DNSBL listing, the recommended action was to rate-limit traffic originating from this address. Firewall rules were suggested to restrict connection rates to 5 requests per minute to mitigate potential abuse while maintaining service availability.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 104.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 8080 | http-alt | tcp | — |
| 8443 | https-alt | tcp | — |
| Closed Ports | 22, 25, 3389 (4 open / 7 scanned) | ||
| Server | cloudflare |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.elementor.comelementor.com |
| Valid From | 2026-08-29T10:32:43+00:00 |
| Valid Until | 2026-11-27T10:32:42+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 05E18DCF0A6D814B1DAC51B3EFF9A3D95932 |
| Thumbprint | A9EF846CB86763D021368B8444BC0D6305C32A6F |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 8 |
| routing | 13% | 1 | 1 |
| services | 37% | 2 | 6 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 10 | 23 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-04 07:04:44 UTC |
| Last Seen | 2026-09-27 19:39:45 UTC |
| Profile Built | 2026-09-27 19:43:18 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 39 |
Full dossier details are available via our API.