172.71.254.193
Intelligence Briefing: IP 172.71.254.193/32
Ownership and Classification:
Analysis attributed the address to Cloudflare, Inc. (AS13335), CLOUDFLARENET. Geolocation data located the network infrastructure in Chicago, Illinois, United States. Risk scoring assigned a low-risk rating with a score of 20. The network role was classified as a Content Delivery Network (CDN).
Threat Posture:
Threat intelligence feeds did not identify the address as a known attacker, spam source, or Tor exit node. Blacklist enumeration returned zero listings. No active threat indicators or known campaigns were associated with the address.
Technical Observations:
Service scanning detected no open ports, and the service purpose was documented as firewalled with no active services exposed. DNSSEC validation status was valid. Forward DNS resolution was not confirmed.
Operational Recommendation:
SOC teams should treat traffic associated with this IP as legitimate edge infrastructure belonging to Cloudflare. No immediate security action or mitigation is required based on the current profile data.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 172.64.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-18 23:16:34 UTC |
| Last Seen | 2026-08-23 00:44:13 UTC |
| Profile Built | 2026-08-30 00:44:36 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 18 |
Full dossier details are available via our API.