172.71.239.26
# IP Intelligence Briefing: 172.71.239.26/32
Classification: CDN Infrastructure | Risk Level: Low Risk | Risk Score: 20
## Executive Summary
The IP address 172.71.239.26 belongs to Cloudflare's CDN infrastructure (ASN 13335, CLOUDFLARENET) and represents standard edge network functionality. The IP shows no malicious activity indicators and operates within clean network parameters. No defensive actions required.
## Network Profile
- Organization: Cloudflare, Inc.
- Network Block: 172.64.0.0/13
- Geolocation: São Paulo, Brazil (BR)
- Infrastructure Type: Content Delivery Network (CDN)
- Network Classification: Cloud-based CDN with firewalled service purpose
- DNSSEC Status: Validated
## Threat Assessment
Threat Indicators: None detected
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Blacklist Count: 0
- Abuse Confidence Score: Not applicable (clean infrastructure)
Campaign Correlation:
- No known campaign matches
- No correlated IPs with threat activity
## Neighborhood Analysis
Subnet 172.71.239.26/24 shows:
- Abuse Density: 0%
- Classification: Clean
- Threat-Sibling Count: 0
- Active Neighbors: 1 (the target IP itself)
- Risk Distribution: No high or medium risk neighbors
## Observation History
Analysis of 20 historical observations reveals:
- Threat Persistence: 0 days
- Ownership Changes: 0
- Persistent Malicious Activity: No
- Recent Subnet Classification: Consistently "clean"
- DNSSEC Validation: Present in routing signals
## Operational Characteristics
- Open Ports: None detected
- TLS Certificates: None exposed
- HTTP Services: None detected
- Service Banners: None detected
- Connection Type: CDN edge node
## Recommended Actions
No defensive actions required. The IP address represents legitimate Cloudflare CDN infrastructure with no threat indicators. Standard monitoring is appropriate.
Note: This IP is part of Cloudflare's global CDN network. Traffic patterns should be evaluated against organizational policy for CDN traffic handling rather than treated as direct threats.
---
*Intelligence generated from IPDebrief platform data*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 172.64.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-26 09:12:03 UTC |
| Last Seen | 2026-08-12 20:23:03 UTC |
| Profile Built | 2026-08-12 20:27:16 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 25 |
Full dossier details are available via our API.