104.29.158.156
The IP address 104.29.158.156 was identified as a low-risk endpoint belonging to Cloudflare, Inc. (ASN 13335). The system operated within the CLOUDFLARENET CIDR block (104.16.0.0/12) and functioned as a Content Delivery Network (CDN) web server.
Traffic analysis revealed open ports TCP 443 and TCP 8443, both secured via HTTPS. The TLS certificate was issued by CloudFlare Origin SSL Certificate Authority with subject alternative names covering *.discord.media. DNS records confirmed the presence of SPF and DMARC configurations.
Threat intelligence indicated a reputation score of zero with no known campaigns, blacklist entries, or malicious indicators. The neighborhood analysis showed zero abuse density and no threat siblings. The operational classification assigned the address to the "Legitimate Infrastructure" category.
The intelligence profile recommended an "Allow" action with an info-level severity. No firewall rules were required beyond standard infrastructure handling.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 104.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| 8443 | https-alt | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.discord.media |
| Valid From | 2025-04-29T15:32:00+00:00 |
| Valid Until | 2040-04-25T15:32:00+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 5475 days |
| Serial Number | 4D38576A66B4294F1909F48D7BD260F9FD92FC83 |
| Thumbprint | 97A767B9E65FFC19F4BA87677494FAAD986CF4EA |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 7 |
| routing | 30% | 3 | 4 |
| services | 33% | 2 | 5 |
| ownership | 30% | 3 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 3 |
| Overall | 30% | 13 | 27 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-01 22:35:54 UTC |
| Last Seen | 2026-09-27 00:17:03 UTC |
| Profile Built | 2026-09-27 00:18:04 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 42 |
Full dossier details are available via our API.