IP Profile

🖥 162.159.44.217 — Cloudflare, Inc.

Cloudflare, Inc. · AS13335 · US · 162.159.44.0/24 · Enriched · threat 0.50 · 1x · 0 sources

reputation 38.8 (GUARDED) · first seen 1d ago · last seen 1d ago
No special flags

Reputation

38.8
GUARDED

Threat Score

0.50
1 sightings

ASN

AS13335
from indicator

Peers on ASN

92
malicious co-tenants

Bad neighborhood

2
162.159.44.0/24

Country

US
from indicator

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP162.159.44.217
OrganizationCloudflare, Inc.
ASNAS13335
Netname
Netblock
Reverse DNS (PTR)
CountryUS country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS13335 neighborhood)

High (.5-.75)
93
Avg threat 0.5 · peak 0.5 across 93 local IPs on AS13335

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

medium-severity
69
ip
69
auto-tagged
69

🔌 Sources (ASN neighborhood)

FireHOL: coinbl_hosts.ipset
33
FireHOL: firehol_level4.netset
5
FireHOL: botscout_30d.ipset
5
FireHOL: stopforumspam.ipset
3
FireHOL: stopforumspam_90d.ipset
3
FireHOL: php_harvesters_7d.ipset
2
FireHOL: php_harvesters_30d.ipset
2
FireHOL: botscout_7d.ipset
2
FireHOL: stopforumspam_1d.ipset
2
FireHOL: stopforumspam_30d.ipset
2
IPsum Level 1
2
IPsum level 1 (all)
2
stamparm ipsum
1
FireHOL: cleantalk_new_30d.ipset
1

🌎 Geographic spread

84

📅 First-seen timeline

2026-08
93

Reporting Sources for this IP (0)

Not in local database, or no sources linked.

Passive DNS — domains resolving here (1)

108.162.195.217 2026-08-20 01:51:38

🏠 Same /24 — 162.159.44.0/24 (2 other malicious IPs)

Other flagged IPs in the same /24 — a concentration here suggests a compromised or abused block.

IPCategoryFamilyThreat
162.159.44.105 Enriched- dossier
162.159.44.106 Enriched- dossier
All in this subnet Bulk takedown

📡 Related indicators on AS13335 (92 total, 40 shown)

IPCategoryCountryThreat
2803:f800:50::6ca2:c33c EnrichedCR dossier
2a06:98c1:50::ac40:20dc EnrichedUS dossier
172.67.134.193 EnrichedUS dossier
108.162.194.62 EnrichedUS dossier
108.162.193.90 EnrichedUS dossier
162.159.44.105 EnrichedUS dossier
172.67.203.174 EnrichedUS dossier
173.245.59.90 EnrichedUS dossier
2a06:98c1:50::ac40:21b4 EnrichedUS dossier
108.162.195.105 EnrichedUS dossier
108.162.193.180 EnrichedUS dossier
108.162.194.5 EnrichedUS dossier
2a06:98c1:50::ac40:22de EnrichedUS dossier
2606:4700:3036::ac43:b832 EnrichedUS dossier
2606:4700:3032::ac43:ca69 EnrichedUS dossier
2606:4700:3036::ac43:bc2c EnrichedUS dossier
2606:4700:3036::ac43:b422 EnrichedUS dossier
2606:4700:3036::ac43:c8ad EnrichedUS dossier
2606:4700:3033::ac43:86c1 EnrichedUS dossier
2803:f800:50::6ca2:c091 EnrichedCR dossier
2606:4700:58::adf5:3bf1 EnrichedUS dossier
108.162.195.106 EnrichedUS dossier
162.159.25.241 EnrichedUS dossier
104.21.6.112 EnrichedUS dossier
172.67.185.93 EnrichedUS dossier
172.67.180.34 EnrichedUS dossier
172.67.184.50 EnrichedUS dossier
172.64.32.109 EnrichedUS dossier
173.245.58.98 EnrichedUS dossier
172.64.35.138 EnrichedUS dossier
172.67.170.117 EnrichedUS dossier
172.67.197.216 EnrichedUS dossier
172.67.178.212 EnrichedUS dossier
172.67.176.206 EnrichedUS dossier
172.67.216.141 DNS A recordUS dossier
104.21.86.70 DNS A recordUS dossier
104.18.54.45 DNS A recordUS dossier
104.21.95.142 EnrichedUS dossier
2606:4700:3034::6815:5f8e EnrichedUS dossier
2606:4700:20::ac43:48cf EnrichedUS dossier
Full ASN dossier →

Case & Takedown Links

Cases

CASE-20260821-76C2 — US — Country OPEN
CASE-20260821-755B — US — Country OPEN
+ Case Takedown

Enrichments

ipinfo

Stored Enrichment Data Enrich Now

1 enrichment records on file (history preserved).

📁 Case Management

+ New case from this
Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php