Intelligence assessment identified IP 104.29.137.170/32 as part of Cloudflare, Inc. infrastructure (ASN 13335). The asset was classified as Low Risk with a risk score of 25. Network role assessment confirmed the endpoint as a Content Delivery Network (CDN) facilitating web server communications on ports 443 (HTTPS) and 8443 (HTTPS-alt). TLS inspection revealed a certificate issued by CloudFlare Origin SSL Certificate Authority covering *.discord.media. Threat intelligence feeds reported zero known attacker or spam source indicators, though one DNSBL listing was detected within control plane data. The surrounding subnet (104.29.137.0/24) was categorized as mostly clean with an abuse density of 0.098. Behavioral analysis showed no active attacker activity, no WAF violations, and no enumeration strikes. Due to the low-risk classification and established CDN function, the recommended action is to continue monitoring without immediate blocking.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 104.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| 8443 | https-alt | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080 (2 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | *.discord.media |
| Valid From | 2025-04-29T15:32:00+00:00 |
| Valid Until | 2040-04-25T15:32:00+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 5475 days |
| Serial Number | 4D38576A66B4294F1909F48D7BD260F9FD92FC83 |
| Thumbprint | 97A767B9E65FFC19F4BA87677494FAAD986CF4EA |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 8 |
| routing | 27% | 2 | 3 |
| services | 37% | 2 | 6 |
| ownership | 30% | 3 | 4 |
| reputation | 32% | 1 | 5 |
| geolocation | 38% | 2 | 5 |
| Overall | 33% | 12 | 31 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-03 17:24:20 UTC |
| Last Seen | 2026-09-26 11:49:38 UTC |
| Profile Built | 2026-09-26 11:58:17 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 50 |
Full dossier details are available via our API.