# 104.22.56.37 — IP Intelligence Summary

104.22.56.37 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Atlanta, United States. It belongs to datacenter or hosting infrastructure. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.22.56.37
- Last updated: 2026-10-06

## Ownership

- Organization: Cloudflare, Inc.
- Network name: CLOUDFLARENET
- Allocated block: 104.16.0.0/12
- ASN: AS13335 (https://ipdebrief.com/asn/13335)
- Regional registry: ARIN
- Cloud / hosting provider: Cloudflare

## Location

- City: Atlanta
- Region: Georgia
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: CDN
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 104.22.56.37/32

\## Executive Summary

IP address 104.22.56.37 is a Cloudflare CDN infrastructure address operating from the CLOUDFLARENET network (ASN 13335). Current risk assessment indicates low risk (score: 20) with no active threat indicators. The IP serves as a legitimate content delivery endpoint with standard CDN characteristics.

\## Infrastructure Profile

\- **Organization:** Cloudflare, Inc.

\- **Network:** CLOUDFLARENET (104.16.0.0/12)

\- **ASN:** 13335

\- **Infrastructure Type:** CDN (Content Delivery Network)

\- **Geolocation:** United States, Georgia region (Atlanta area)

\- **Classification:** Cloud-based CDN infrastructure with firewalled/no services exposed

\- **DNS Resolution:** Forward confirmation not confirmed; no PTR hostnames recorded

\## Threat Intelligence Assessment

\- **Risk Score:** 20 (Low Risk)

\- **Threat Indicators:** None detected

\- **Blacklist Status:** No blacklist entries

\- **Known Campaigns:** None identified

\- **Tor/Proxy Activity:** Not detected (not a Tor exit node, not a known proxy)

\- **Spam Source:** Not identified

\- **Known Attacker:** Not flagged

\## Network Neighborhood Analysis (104.22.56.0/24)

\- **Abuse Density:** 0.0 (Clean classification)

\- **Total Siblings:** 2

\- **Active Siblings:** 2

\- **Threat Siblings:** 0

\- **Adjacent IP (104.22.56.26):** Risk score 25, authority score 85

The /24 subnet shows minimal abuse activity, with no malicious peers detected.

\## Observation History

\- **Total Observations:** 17 signals recorded

\- **Recent Activity:** Last observed 2026-08-05

\- **Notable Signals:**

\- 8 total listings recorded, with 1 high-severity listing entry

\- Operator classification: "Minimal" (score: 0.1304)

\- Geolocation signals from multiple sources with US consensus

\- Routing stability flags indicate standard CDN behavior

\## Operational Characteristics

\- **Services:** No open ports exposed; services firewalled/no services detected

\- **TLS/Certificates:** No active TLS certificates exposed

\- **HTTP:** No HTTP title or banner captured

\- **RTT Analysis:** Average RTT 41.2ms with 5 probe attempts; geo-validation shows RTT distance discrepancy of 7165km (likely due to CDN edge node placement)

\- **DNSSEC:** Validated

\## Recommended Actions

No specific firewall rules or blocking recommendations are generated for this IP based on current risk profile. Standard Cloudflare CDN traffic should be permitted through perimeter defenses. The IP exhibits normal CDN behavior with no evidence of abuse or malicious activity.

\## Threat Actor Indicators

\- **Likelihood of Malicious Activity:** None

\- **Correlated IPs:** 0

\- **Certificate Matches:** 0

\- **Campaign Correlations:** None

\## Conclusion

104.22.56.37 represents standard Cloudflare CDN infrastructure with a clean security posture. No defensive action is recommended beyond standard allow policies for legitimate CDN traffic. The IP's low risk score, clean neighborhood classification, and absence of threat indicators support continued traffic flow from this endpoint.

## Nearby addresses

- 104.22.56.1 (https://ipdebrief.com/104.22.56.1)
- 104.22.56.26 (https://ipdebrief.com/104.22.56.26)

---

Source: IPDebrief, "104.22.56.37 IP intelligence", https://ipdebrief.com/104.22.56.37, updated 2026-10-06. Assessments are probabilistic.