172.71.190.202
## IP Intelligence Briefing: 172.71.190.202/32
Executive Summary
IP 172.71.190.202 is a low-risk address associated with Cloudflare CDN infrastructure. The IP exhibits standard CDN behavior with no active services, minimal threat indicators, and negligible neighborhood abuse activity. Recommended action: Monitor only.
Profile Analysis
Risk Assessment: Risk Score 25/100 (Low Risk)
- Provider Score: 0
- Authority Score: 0
- Stability Score: 0
Network Classification:
- Infrastructure Type: CDN (Cloudflare)
- Service Purpose: Firewalled / No Services
- Origin ASN: 13335
- BGP Prefix: 172.71.190.0/24
Geolocation:
- Country: United States
- City: Ashburn, Virginia
- RIR: ARIN
Threat Indicators
- Threat Reputation: No malicious indicators detected
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0
- Pulsedive Risk: N/A
- Known Campaigns: None identified
DNSBL Status:
- Listed on 1 of 8 DNSBL feeds
- Listed Count: 1
Neighborhood Analysis
Subnet: 172.71.190.0/24
- Total Siblings: 1
- Abuse Density: 0
- High Risk Neighbors: 0
- Medium Risk Neighbors: 0
- Low Risk Neighbors: 1
- Notable Neighbor: 172.71.190.77 (Risk: 0, Authority: 50)
Observation History
- Total Observations: 10
- Most Recent: 2026-08-13T18:19:58Z
- Ownership Stability: Cloudflare, Inc. (consistent)
- Geolocation Consistency: Ashburn, VA, US
- No observed escalation in threat signals
Related Entities
- Relationships Graph: No direct relationships discovered
- Associated Hostnames: None
- Associated Domains: None
Recommended Actions
1. Block: Not required (Low Risk CDN)
2. Monitor: Standard CDN traffic patterns expected
3. Allow: Permissive rules recommended for outbound connections
Intelligence Notes
The IP address operates as a standard Cloudflare CDN endpoint with no exposed services. The single DNSBL listing appears to be a routine operational flag rather than malicious activity. The /24 subnet demonstrates minimal abuse density with only one neighbor IP in scope. No campaign correlation or threat persistence indicators observed. SOC analysts should treat this as legitimate infrastructure traffic requiring standard monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 172.64.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 19% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-13 12:52:47 UTC |
| Last Seen | 2026-09-01 17:24:10 UTC |
| Profile Built | 2026-08-31 04:07:33 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 20 |
Full dossier details are available via our API.