172.70.250.101📋 Copy

IP INTELLIGENCE BRIEFING: 172.70.250.101/32

Executive Summary

IP address 172.70.250.101 belongs to Cloudflare, Inc. (ASN 13335, CLOUDFLARENET) and is geolocated to Frankfurt am Main, Germany. The IP presents a moderate risk profile (score: 50) with no direct threat indicators. The IP operates as Cloudflare CDN infrastructure with no open services detected. Neighborhood analysis shows the /24 subnet has low-to-moderate abuse density (0.3333) with 3 sibling IPs.

---

Ownership & Infrastructure

• Organization: Cloudflare, Inc.
• ASN: 13335
• Network Block: 172.64.0.0/13
• Infrastructure Type: Content Delivery Network (CDN)
• Service Status: Firewalled / No Services Detected

---

Risk Assessment

---

Threat Indicators

• Direct threat indicators: None observed
• Known campaigns: None correlated
• Threat feeds: No matches
• Pulsedive risk: Not reported

---

Geolocation & Network Behavior

• Country: Germany (DE)
• Region: Hesse
• City: Frankfurt am Main
• RTT Metrics: Min 103ms, Avg 104.2ms, Max 108ms
• Distance Claimed: 296.5km
• Geo Plausible: Yes
• Traceroute: 11 hops, 2 timed out, transit through Comcast

---

DNS & Service Analysis

• Open ports: None detected
• TLS certificates: None
• Hosted domains: 0
• Email authentication: Not configured
• Forward resolution: 0 hostnames
• PTR records: None

---

Neighborhood Analysis (172.70.250.0/24)

• Total siblings: 3
• Active siblings: 1
• Threat siblings: 1
• Abuse density: 0.3333 (33.3%)
• Classification: Mostly clean
• Neighbor risk distribution: 1 high, 1 medium, 1 low risk

Notable neighbors:

• 172.70.250.34: Risk 25, Authority 85
• 172.70.250.100: Risk 50, Authority 85

---

Observation History

19 total observations recorded. Recent activity (2026-08-06) includes:

• Network traceroute analysis
• Port scanning activity
• Geo validation probes
• Subnet abuse density measurements

No evidence of threat persistence or escalating malicious behavior.

---

Relationship Graph

All 5 relationship entries map to CLOUDFLARENET network infrastructure. No external relationships to organizations, hostnames, or certificates detected.

---

Recommended Actions

Risk Context for Action: While the moderate risk score (50) and neighborhood abuse density suggest blocking, this is a legitimate Cloudflare CDN IP. Blocking may impact legitimate CDN traffic. Recommend correlating with local threat context and verifying if this IP is being used for legitimate purposes in your environment.

---

Analyst Notes

• This IP represents Cloudflare CDN infrastructure, commonly used for legitimate web traffic acceleration and DDoS mitigation
• No direct evidence of malicious activity on this specific IP
• Subnet-level abuse density warrants monitoring but does not confirm malicious use of this IP
• Consider whitelisting if this IP is legitimately routing traffic to your infrastructure
• Monitor for any changes in behavior or additional threat indicators

*Report generated: 2026-08-06*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.