# 104.18.42.87 — IP Intelligence Summary

104.18.42.87 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Toronto, United States. It belongs to datacenter or hosting infrastructure. As of November 3, 2026, IPDebrief rates it Low Risk (30/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.18.42.87
- Last updated: 2026-11-03

## Ownership

- Organization: Cloudflare, Inc.
- Network name: CLOUDFLARENET
- Allocated block: 104.16.0.0/12
- ASN: AS13335 (https://ipdebrief.com/asn/13335)
- Regional registry: ARIN
- Cloud / hosting provider: Cloudflare

## Location

- City: Toronto
- Region: Ontario
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: CDN
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (30/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https
- 8080/tcp — http-alt
- 8443/tcp — https-alt

## Analyst narrative

The IP address 104.18.42.87 was identified as infrastructure belonging to Cloudflare, Inc. (ASN 13335), operating as a Content Delivery Network (CDN) service. Geolocation data indicated a United States origin. The endpoint opened ports 80, 443, 8080, and 8443, with server banners confirming Cloudflare presence.

A threat assessment classified the address as Low Risk with a risk score of 30. No specific malicious indicators, known campaigns, or attacker flags were associated with this address in the observed data. Neighborhood analysis of the /24 subnet showed an abuse density of 0.2, with two threat siblings identified among ten active siblings.

Behavioral analysis indicated no WAF violations, honeypot hits, or enumeration strikes. Despite the lack of explicit attack indicators, the recommendation was to apply rate-limiting controls due to a moderate risk classification. The network role was consistent with hosting infrastructure, but route stability was marked as false. The profile confidence was rated low. Intent classification remained unknown due to insufficient data.

Recommendation: Apply rate-limiting firewall rules to mitigate potential abuse while allowing standard web traffic.

## Nearby addresses

- 104.18.42.54 (https://ipdebrief.com/104.18.42.54)
- 104.18.42.126 (https://ipdebrief.com/104.18.42.126)
- 104.18.42.163 (https://ipdebrief.com/104.18.42.163)
- 104.18.42.178 (https://ipdebrief.com/104.18.42.178)
- 104.18.42.202 (https://ipdebrief.com/104.18.42.202)
- 104.18.42.218 (https://ipdebrief.com/104.18.42.218)
- 104.18.42.227 (https://ipdebrief.com/104.18.42.227)
- 104.18.42.234 (https://ipdebrief.com/104.18.42.234)
- 104.18.42.238 (https://ipdebrief.com/104.18.42.238)

---

Source: IPDebrief, "104.18.42.87 IP intelligence", https://ipdebrief.com/104.18.42.87, updated 2026-11-03. Assessments are probabilistic.