104.29.158.154
104.29.158.154 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Toronto, United States. As of November 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
Intelligence was gathered on IP address 104.29.158.154/32. The address was registered to Cloudflare, Inc. (ASN 13335) within the CLOUDFLARENET block (104.16.0.0/12). Geolocation consensus placed the infrastructure in Toronto, Ontario, US. Network services included HTTPS on ports 443 and 8443, utilizing a TLS certificate issued by Cloudflare, Inc. for *.discord.media.
Threat analysis returned a low risk score of 25 with zero blacklists recorded. Control plane analysis showed one DNSBL listing among eight total checks. The address resided within a /24 subnet classified as mixed with an abuse density of 0.2178, and 22 threat siblings were observed in the neighborhood. Behavioral analysis showed no honeypot hits or WAF violations. Attribution confidence was moderate based on ownership data.
The threat actor classification was marked as "Suspicious Host" with a recommendation to Monitor. Data freshness confirmed the profile was live as of late November 2026. No specific campaigns or known attacker associations were linked to this address.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 104.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| 8443 | https-alt | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.discord.media |
| Valid From | 2025-04-29T15:32:00+00:00 |
| Valid Until | 2040-04-25T15:32:00+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 5475 days |
🛡️ Public Network Snapshot
| Origin ASN | AS13335 |
| Network Prefix | 104.29.158.0/24 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 35% | 2 | 4 |
| ownership | 33% | 2 | 4 |
| reputation | 28% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 27% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-16 11:35:46 UTC |
| Last Seen | 2026-11-06 16:12:19 UTC |
| Profile Built | 2026-11-06 16:40:23 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 104.29.158.154
Who owns the IP address 104.29.158.154?
104.29.158.154 is registered to Cloudflare, Inc.. The address falls within the 104.16.0.0/12 network block. Registration is held at ARIN.
Where is 104.29.158.154 located?
Geolocation data places 104.29.158.154 in Toronto, Ontario, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 104.29.158.154 malicious or safe?
104.29.158.154 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 104.29.158.154?
Responsive ports observed on 104.29.158.154 include 443, 8443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.