172.71.232.26
172.71.232.26 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Paris, France. It belongs to datacenter or hosting infrastructure. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 172.71.232.26/32
Classification: Low Risk | Infrastructure: Cloudflare CDN | Geolocation: Paris, France
---
## Executive Summary
IP address 172.71.232.26 is a Cloudflare CDN endpoint with a risk score of 25 (Low Risk). The IP operates within the 172.64.0.0/13 Cloudflare network block and demonstrates stable infrastructure characteristics consistent with enterprise edge services. No malicious activity, abuse indicators, or threat campaigns were observed.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 25 / 100 |
| **Provider** | Cloudflare, Inc. (ASN 13335) |
| **Network** | 172.64.0.0/13 (CLOUDFLARENET) |
| **Infrastructure Type** | CDN |
| **Geolocation** | Paris, Île-de-France, France |
| **Open Ports** | None detected |
| **DNS Resolution** | Failed / No PTR records |
| **Blacklist Status** | Clean (0/0 lists) |
| **Campaign Association** | None |
---
## Threat Assessment
Current Risk Level: Low
The IP exhibits no threat indicators:
- No known campaigns or threat feeds
- Zero blacklist entries
- Not identified as Tor exit node, VPN, proxy, or spam source
- No active honeypot hits or enumeration strikes
- No WAF violations recorded
The operator score of 0.2174 is classified as "Minimal," indicating standard operational behavior for the network.
---
## Network Context
Subnet Analysis (172.71.232.0/24):
- Abuse density: 0 (clean)
- Total siblings: 4
- Threat siblings: 0
- All neighboring IPs maintain low risk scores (25) with high authority scores (85)
Control Plane:
- Origin ASN: 13335
- BGP Prefix: 172.71.232.0/24
- Route changes (30-day): 1
- Route stability: Unstable (minor fluctuations)
- DNSSEC: Valid
- RIR Registry: ARIN
---
## Historical Observations
Analysis of 24 historical observations reveals consistent infrastructure identification:
- Multiple observations confirm CDN classification (2026-08-05, 2026-08-12)
- Provider consistently identified as Cloudflare
- No changes in threat classification or geolocation
- No emergence of attacker indicators, spam sources, or blacklist entries
- Threat persistence days: 0
---
## Recommended Actions
No immediate action required. This IP represents legitimate Cloudflare CDN infrastructure. Standard monitoring and logging practices apply. No firewall rules, blocking, or rate-limiting actions are recommended at this time.
Note: Continue monitoring for any changes in service behavior or connection patterns, as normal CDN traffic patterns may vary based on load and geographic distribution.
---
*Report generated: 2026-08-12 | Data sources: IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 172.64.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS13335 |
| Network Prefix | 172.71.232.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 17% | 2 | 3 |
| services | 12% | 2 | 2 |
| ownership | 22% | 3 | 4 |
| reputation | 22% | 1 | 3 |
| geolocation | 24% | 2 | 3 |
| Overall | 20% | 12 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-16 04:31:19 UTC |
| Last Seen | 2026-10-06 08:59:25 UTC |
| Profile Built | 2026-10-06 09:00:12 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 172.71.232.26
Who owns the IP address 172.71.232.26?
172.71.232.26 is registered to Cloudflare, Inc.. The address falls within the 172.64.0.0/13 network block. Registration is held at ARIN.
Where is 172.71.232.26 located?
Geolocation data places 172.71.232.26 in Paris, Île-de-France, France. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 172.71.232.26 malicious or safe?
172.71.232.26 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 172.71.232.26 a VPN, proxy, or data center address?
172.71.232.26 is classified as a content delivery network based on network ownership and behavioural analysis.