# IP Intelligence Briefing: 104.22.57.46/32
## Executive Summary
IP address 104.22.57.46 belongs to Cloudflare, Inc. (ASN 13335) and is classified as a Content Delivery Network (CDN) infrastructure asset. Current risk assessment indicates Low Risk with a risk score of 25. No active threat indicators or malicious activity detected. The IP is part of the CLOUDFLARENET network and operates as a firewalled CDN edge node.
## Technical Profile
| Attribute | Value |
|---|---|
| **IP Address** | 104.22.57.46/32 |
| **Organization** | Cloudflare, Inc. |
| **ASN** | 13335 |
| **Network** | CLOUDFLARENET (104.16.0.0/12) |
| **Location** | US (Atlanta, Georgia) |
| **Classification** | CDN Provider |
| **Risk Score** | 25 (Low Risk) |
| **Infrastructure Type** | CDN |
| **Service Status** | Firewalled / No Services |
## Threat Assessment
- Abuse Confidence Score: Not applicable (infrastructure IP)
- Blacklist Count: 0
- Known Campaigns: None identified
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- DNSBL Listings: 1 (dnsblListedCount: 1)
## Network Context
- Subnet: 104.22.57.0/24
- Abuse Density: 0 (minimal)
- Neighbor IPs: 1 (104.22.57.45, risk score 25)
- Threat Siblings: 0
- Active Threats in Subnet: None
## Observations & History
Fifteen observations recorded with consistent benign patterns:
- No ownership changes detected
- Zero threat observation count
- No persistent malicious activity flagged
- Geolocation data consistently resolved to US region
- No service enumeration or port scanning activity
## Relationships
- Network Associations: CLOUDFLARENET (2 relationships)
- No external entity associations detected
- Expected for CDN infrastructure
## Recommended Actions
No blocking or restrictive firewall rules recommended. This is legitimate CDN infrastructure:
- Allow inbound traffic on required CDN ports as per organizational policy
- No defensive actions required for this specific IP
- Monitor for any anomalous behavior patterns if traffic appears suspicious
## Analyst Notes
This IP represents standard Cloudflare CDN edge infrastructure. The "Firewalled / No Services" classification is typical for CDN edge nodes that route traffic rather than host services directly. The low abuse density (0) in the /24 subnet and absence of threat siblings further confirms benign operation. SOC teams should not block this address under normal circumstances; however, traffic patterns should be evaluated against baseline expectations for CDN behavior.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 104.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 35% | 2 | 3 |
| services | 24% | 2 | 2 |
| ownership | 38% | 3 | 4 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 30% | 12 | 17 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-01 01:41:08 UTC |
| Last Seen | 2026-08-13 02:02:23 UTC |
| Profile Built | 2026-08-13 02:18:28 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 28 |
Full dossier details are available via our API.