IP address 104.18.20.101 is hosted on infrastructure owned by Cloudflare, Inc. (ASN 13335, CLOUDFLARENET) and operates as a Content Delivery Network (CDN) with a service purpose of web server. Geolocation data placed the IP within the United States. Operational observations occurred between August 29, 2026, and September 19, 2026.
Security posture analysis assigned a risk score of 30, categorized as Low Risk. Threat intelligence feeds returned no positive indicators; the address was not listed as a Tor exit node, known attacker, or spam source, and maintained a zero blacklist count. Behavioral metrics recorded zero WAF violations, honeypot hits, or enumeration strikes. The surrounding network neighborhood was classified as clean with zero threat siblings. Standard web services operated on ports 80, 443, 8080, and 8443, with service banners confirming Cloudflare presence.
Although the reputation indicated Low Risk, automated security recommendations assigned a medium severity level for rate-limiting. Intent classification remained unknown due to insufficient data to classify intent. No specific threat campaigns were correlated with this address. Control plane analysis showed inconsistent route stability, but no RPKI validation or IRR matches were detected.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 104.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| 8080 | http-alt | tcp | β |
| 8443 | https-alt | tcp | β |
| Closed Ports | 22, 25, 3389 (4 open / 7 scanned) | ||
| Server | cloudflare |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 2 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-29 20:25:17 UTC |
| Last Seen | 2026-09-19 16:22:05 UTC |
| Profile Built | 2026-09-19 16:59:47 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 24 |
Full dossier details are available via our API.