Skip to content

IP Registry Allocation Profile

Allocation class of resolved IPs: residential, datacenter, cloud, mobile, allocation churn. Each fires with named evidence and a 3-question analyst Q&A trail.

About

What IP Registry Allocation Profile captures

Allocation class of resolved IPs: residential, datacenter, cloud, mobile, allocation churn. Tier-1 SOC analysts use them to cut triage time on suspicious dns history behavior; CTI teams pivot from them to the broader campaign graph.

Browse

6 signals in IP Registry Allocation Profile

Each row opens a leaf page with the signal's direction, named evidence, and 3-question Q&A trail. Use them as audit anchors when a verdict surfaces this subgroup.

Verdict scenarios

How IP Registry Allocation Profile shapes the call

Three real-world situations where IP Registry Allocation Profile evidence dominates the decision. Verdict and explanation are how VerdictIQ would frame the outcome to an analyst, not raw signal slugs.

High riskVERDICT · BLOCK
The situation

A domain serving production traffic from residential or mobile IP allocations rather than datacenter or cloud space.

VerdictIQ explains

Decline. Residential and mobile IPs serving production traffic is a textbook proxy or bot infrastructure pattern. Treat as hostile.

Medium riskVERDICT · REVIEW
The situation

A domain whose IP allocation class has shifted from datacenter to mixed residential/mobile in the last 30 days.

VerdictIQ explains

Send to analyst review. The allocation shift is suspicious and may indicate proxy bridging. Verify before granting prior trust.

Low riskVERDICT · ALLOW
The situation

A domain consistently anchored on a major cloud or datacenter allocation block.

VerdictIQ explains

Allow. The allocation profile matches a real, hosted property. No registry-side reason to delay.

Sibling subgroups

Other subgroups in DNS History

6 more subgroups in this group, each bundling signals that share a different mechanism. Tap one to inspect its signal names.

See subgroup detail
See subgroup detail
See subgroup detail
See subgroup detail
See subgroup detail
See subgroup detail

See IP Registry Allocation Profile signals fire on your data

Free tier: 100 IOCs/day, LLM layer included.