IP Profile

🖥 172.64.35.138 — Cloudflare, Inc.

Cloudflare, Inc. · AS13335 · US · 172.64.35.0/24 · Enriched · threat 0.50 · 1x · 0 sources · PTR weston.ns.cloudflare.com

reputation 34.6 (GUARDED) · first seen 2d ago · last seen 2d ago
No special flags ip medium-severity auto-tagged
🔄 Pivot:🌐 AS13335🏢 Cloudflare🌎 US📁 Enriched

Reputation

34.6
GUARDED

Threat Score

0.50
1 sightings

ASN

AS13335
from indicator

Peers on ASN

61
malicious co-tenants

Bad neighborhood

0
172.64.35.0/24

Country

US
from indicator
PIVOT🖥 IP Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP172.64.35.138
OrganizationCloudflare, Inc.
ASNAS13335
Netname—
Netblock—
Reverse DNS (PTR)weston.ns.cloudflare.com
CountryUS country intel
Abuse contactabuse@cloudflare.com

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS13335 neighborhood)

High (.5-.75)
62
Avg threat 0.5 · peak 0.5 across 62 local IPs on AS13335

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

ip
60
auto-tagged
60
medium-severity
60

🔌 Sources (ASN neighborhood)

FireHOL: coinbl_hosts.ipset
25
FireHOL: firehol_level4.netset
4
FireHOL: botscout_30d.ipset
4
FireHOL: stopforumspam.ipset
3
FireHOL: stopforumspam_90d.ipset
3
FireHOL: botscout_7d.ipset
2
FireHOL: stopforumspam_1d.ipset
2
FireHOL: stopforumspam_30d.ipset
2
IPsum Level 1
2
IPsum level 1 (all)
2
FireHOL: php_harvesters_7d.ipset
2
FireHOL: php_harvesters_30d.ipset
2
FireHOL: firehol_level2.netset
1
ThreatView IP
1

🌎 Geographic spread

55

📅 First-seen timeline

2026-08
62

Reporting Sources for this IP (0)

Not in local database, or no sources linked.

Passive DNS — domains resolving here (2)

2803:f800:50::6ca2:c38a 2026-08-15 06:35:45
172.64.35.138 2026-08-16 18:05:15

🏠 Same /24 — 172.64.35.0/24 (0 other malicious IPs)

No other flagged IPs in this /24 (or subnet data not populated).

📡 Related indicators on AS13335 (61 total, 40 shown)

IPCategoryCountryThreat
108.162.195.106 EnrichedUS dossier
162.159.25.241 EnrichedUS dossier
104.21.6.112 EnrichedUS dossier
172.67.185.93 EnrichedUS dossier
172.67.180.34 EnrichedUS dossier
172.67.184.50 EnrichedUS dossier
172.64.32.109 EnrichedUS dossier
173.245.58.98 EnrichedUS dossier
172.67.170.117 EnrichedUS dossier
172.67.197.216 EnrichedUS dossier
172.67.178.212 EnrichedUS dossier
172.67.176.206 EnrichedUS dossier
172.67.216.141 DNS A recordUS dossier
104.21.86.70 DNS A recordUS dossier
104.18.54.45 DNS A recordUS dossier
104.21.95.142 EnrichedUS dossier
2606:4700:3034::6815:5f8e EnrichedUS dossier
2606:4700:20::ac43:48cf EnrichedUS dossier
2606:4700:78::90:0:182 EnrichedUS dossier
172.65.90.26 EnrichedUS dossier
172.66.47.157 EnrichedUS dossier
172.66.44.145 EnrichedUS dossier
2606:4700:310c::ac42:2f9d EnrichedUS dossier
2606:4700:310c::ac42:2f58 EnrichedUS dossier
2606:4700::6810:752b EnrichedUS dossier
104.28.163.183 IP BlocklistsNL dossier
172.67.216.191 IP BlocklistsUS dossier
172.67.216.166 IP BlocklistsUS dossier
172.67.216.161 IP BlocklistsUS dossier
172.67.216.116 IP BlocklistsUS dossier
172.67.184.53 IP BlocklistsUS dossier
172.67.176.236 IP BlocklistsUS dossier
172.67.176.182 IP BlocklistsUS dossier
172.67.176.110 IP BlocklistsUS dossier
172.67.176.6 IP BlocklistsUS dossier
172.67.170.166 IP BlocklistsUS dossier
172.67.169.129 IP BlocklistsUS dossier
172.67.147.232 IP BlocklistsUS dossier
172.67.147.228 IP BlocklistsUS dossier
172.67.137.177 IP BlocklistsUS dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo ipinfo

Stored Enrichment Data Enrich Now

2 enrichment records on file (history preserved).

🔍 OSINT pivots — external lookups

Shodan →Censys →GreyNoise →AbuseIPDB →VirusTotal →ipinfo →BGP.HE →RIPEstat →OTX →ThreatFox →Pulsedive →OpenSanctions →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot →Link Analysis →Infrastructure →Passive DNS →Timeline →ASN dossier →ASN co-tenants →Country intel →Add to case →Export STIX/MISP →

📁 Case Management

+ New case from this
← IP Index
Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Resolve linkage batchBulk OTX enrich

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

ASN AnalysisLink AnalysisOSINT