Intelligence Briefing: 141.193.213.21/32
Ownership and Infrastructure
The IP address was registered to WPEngine, Inc. (ASN 209242, Netname WPENG) within the RIPE region. Technical analysis identified the host as a Web Server operating on Cloudflare infrastructure. Open ports included TCP 80, 443, 8080, and 8443. TLS certificates were issued by Google Trust Services for the subject wpewaf.com.
Threat Assessment
The host maintained a Low Risk reputation score of 30. No known campaigns, attacker classifications, or spam source indicators were detected. Behavioral monitoring recorded zero honeypot hits, enumeration strikes, or WAF violations. While the general blacklist count was zero, the IP was listed on one DNS blacklist source.
Observations and Anomalies
Geolocation data placed the host in the United States; however, a contradiction was noted between the claimed location and RTT physics measurements (7625.7km distance versus 23ms observed RTT). The IP was observed between August 31 and September 21, 2026.
Recommendations
Due to the moderate risk classification and contradictory geolocation data, operational guidance suggests implementing rate limiting. Firewall rules should restrict traffic to 5 packets per minute to mitigate potential abuse.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | WPEngine, Inc. |
| ASN | AS209242 |
| Network Name | WPENG |
| CIDR Block | 141.193.213.0/24 |
| RIR | RIPE |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| 8080 | http-alt | tcp | β |
| 8443 | https-alt | tcp | β |
| Closed Ports | 22, 25, 3389 (4 open / 7 scanned) | ||
| Server | cloudflare |
| HTTP Title | β |
π TLS Certificate
| SANs | wpewaf.com*.wpewaf.com |
| Valid From | 2026-07-23T19:17:18+00:00 |
| Valid Until | 2026-10-21T20:17:07+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256ECDSA |
| Validity Period | 90 days |
| Serial Number | 00C3F770CB914D812213A72D155A7516D4 |
| Thumbprint | B2DD619D6AD665FF77B94E24A263DDA7973D2077 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-31 07:16:33 UTC |
| Last Seen | 2026-09-21 15:52:53 UTC |
| Profile Built | 2026-09-21 16:02:16 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 25 |
Full dossier details are available via our API.