IP Profile

🖥 172.67.216.166 — Cloudflare, Inc.

Cloudflare, Inc. · AS13335 · US · 172.67.216.0/24 · IP Blocklists · threat 0.50 · 2x · 1 sources

reputation 42 (ELEVATED) · first seen Aug 06, 2026 · last seen Aug 06, 2026
No special flags ip medium-severity auto-tagged

Reputation

42
ELEVATED

Threat Score

0.50
2 sightings

ASN

AS13335
from indicator

Peers on ASN

56
malicious co-tenants

Bad neighborhood

6
172.67.216.0/24

Country

US
from indicator

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP172.67.216.166
OrganizationCloudflare, Inc.
ASNAS13335
Netname
Netblock
Reverse DNS (PTR)
CountryUS country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS13335 neighborhood)

High (.5-.75)
57
Avg threat 0.5 · peak 0.5 across 57 local IPs on AS13335

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

ip
57
auto-tagged
57
medium-severity
57

🔌 Sources (ASN neighborhood)

FireHOL: coinbl_hosts.ipset
25
FireHOL: stopforumspam.ipset
3
FireHOL: stopforumspam_90d.ipset
3
FireHOL: stopforumspam_1d.ipset
2
FireHOL: stopforumspam_30d.ipset
2
IPsum Level 1
2
IPsum level 1 (all)
2
FireHOL: php_harvesters_7d.ipset
2
FireHOL: php_harvesters_30d.ipset
2
FireHOL: firehol_level2.netset
1
ThreatView IP
1
FireHOL level2
1
FireHOL: firehol_level4.netset
1
FireHOL: firehol_abusers_1d.netset
1

🌎 Geographic spread

53

📅 First-seen timeline

2026-08
57

Reporting Sources for this IP (1)

FireHOL: coinbl_hosts.ipsetIP Blocklists

Passive DNS — domains resolving here (0)

No passive DNS yet. Run DNS audit.

🏠 Same /24 — 172.67.216.0/24 (6 other malicious IPs)

Other flagged IPs in the same /24 — a concentration here suggests a compromised or abused block.

IPCategoryFamilyThreat
172.67.216.7 IP Blocklists- dossier
172.67.216.92 IP Blocklists- dossier
172.67.216.116 IP Blocklists- dossier
172.67.216.161 IP Blocklists- dossier
172.67.216.191 IP Blocklists- dossier
172.67.216.141 DNS A record- dossier
All in this subnet Bulk takedown

📡 Related indicators on AS13335 (56 total, 40 shown)

IPCategoryCountryThreat
104.21.6.112 EnrichedUS dossier
172.67.185.93 EnrichedUS dossier
172.67.180.34 EnrichedUS dossier
172.67.184.50 EnrichedUS dossier
172.64.32.109 EnrichedUS dossier
173.245.58.98 EnrichedUS dossier
172.64.35.138 EnrichedUS dossier
172.67.170.117 EnrichedUS dossier
172.67.197.216 EnrichedUS dossier
172.67.178.212 EnrichedUS dossier
172.67.176.206 EnrichedUS dossier
172.67.216.141 DNS A recordUS dossier
104.21.86.70 DNS A recordUS dossier
104.18.54.45 DNS A recordUS dossier
104.21.95.142 EnrichedUS dossier
2606:4700:3034::6815:5f8e EnrichedUS dossier
2606:4700:20::ac43:48cf EnrichedUS dossier
2606:4700:78::90:0:182 EnrichedUS dossier
172.65.90.26 EnrichedUS dossier
172.66.47.157 EnrichedUS dossier
172.66.44.145 EnrichedUS dossier
2606:4700:310c::ac42:2f9d EnrichedUS dossier
2606:4700:310c::ac42:2f58 EnrichedUS dossier
2606:4700::6810:752b EnrichedUS dossier
104.28.163.183 IP BlocklistsNL dossier
172.67.216.191 IP BlocklistsUS dossier
172.67.216.161 IP BlocklistsUS dossier
172.67.216.116 IP BlocklistsUS dossier
172.67.184.53 IP BlocklistsUS dossier
172.67.176.236 IP BlocklistsUS dossier
172.67.176.182 IP BlocklistsUS dossier
172.67.176.110 IP BlocklistsUS dossier
172.67.176.6 IP BlocklistsUS dossier
172.67.170.166 IP BlocklistsUS dossier
172.67.169.129 IP BlocklistsUS dossier
172.67.147.232 IP BlocklistsUS dossier
172.67.147.228 IP BlocklistsUS dossier
172.67.137.177 IP BlocklistsUS dossier
172.67.137.143 IP BlocklistsUS dossier
172.67.137.109 IP BlocklistsUS dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo

Stored Enrichment Data Enrich Now

1 enrichment records on file (history preserved).

📁 Case Management

+ New case from this
Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php