173.245.59.166
Intelligence Briefing: 173.245.59.166/32
The IP address was identified as an endpoint associated with Cloudflare, Inc. (ASN 13335, CLOUDFLARENET), functioning as a Content Delivery Network (CDN). Geolocation data placed the network in the United States. Scanning observed open TCP ports 80, 443, 8080, and 8443, with reverse DNS resolving to frank.ns.cloudflare.com.
Threat analysis indicated a Low Risk reputation score of 30. While the subnet 173.245.59.0/24 was classified as clean with zero threat siblings, control plane data revealed one DNSBL listing. Consequently, the system flagged the address as a Suspicious Host with Moderate risk severity.
Action: Rate-limit traffic to this address using standard firewall configurations to mitigate the identified DNSBL listing. No known attack campaigns, Tor exit node activity, or persistent malicious behavior were associated with this IP.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 173.245.48.0/20 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | frank.ns.cloudflare.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | frank.ns.cloudflare.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 8080 | http-alt | tcp | — |
| 8443 | https-alt | tcp | — |
| Closed Ports | 22, 25, 3389 (4 open / 7 scanned) | ||
| Server | cloudflare |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 26% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-05 23:46:29 UTC |
| Last Seen | 2026-09-21 15:49:20 UTC |
| Profile Built | 2026-09-21 16:00:27 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 38 |
Full dossier details are available via our API.