172.70.87.50
Intelligence analysis indicates IP 172.70.87.50 was assigned to Cloudflare, Inc. (ASN 13335) within the 172.64.0.0/13 CIDR block. The infrastructure type was classified as a Content Delivery Network (CDN) with a service purpose of firewalled operations and no open ports or active services detected. The IP carried a risk score of 25 and was not associated with known campaigns, Tor networks, or spam sources.
Signal analysis identified contradictions within the dataset. Geolocation sources disputed the country of origin, reporting both the United States and Great Britain, while RTT measurements recorded 59.0 ms against a claimed distance of 7997.4 km, violating minimum latency physics. The control plane confirmed the origin ASN 13335 with a BGP prefix of 172.70.87.0/24. The local subnet 172.70.87.0/24 maintained a clean classification with zero abuse density and two active siblings. No specific threat indicators, blacklist entries, or campaign correlations were recorded during the observation window spanning from 2026-09-06 to 2026-09-19. Based on current data, the recommendation remains to monitor for changes due to signal contradictions, despite the low severity classification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 172.64.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 15 |
| Data Coherence | Mixed Signals (60%) — 2 contradiction(s) |
| Attribution | Very Low (20%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: GB, US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-06 22:18:52 UTC |
| Last Seen | 2026-09-19 19:10:13 UTC |
| Profile Built | 2026-09-23 12:16:48 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 26 |
Full dossier details are available via our API.