104.243.245.22📋 Copy

IP Intelligence Briefing: 104.243.245.22

Date: 2026-06-11

---

**1. Risk Profile**

• Reputation: Moderate Risk (Risk Score: 50/100)
• Threat Indicators: No active malicious activity detected (no malware, phishing, or C2 indicators).
• Network Role: Firewalled / No Services (no open ports or TLS services detected).
• Geolocation: Mexico City, Mexico (latitude: 19.43, longitude: -99.12).

---

**2. Ownership & Network**

• ASN: 396356 (Private Customer, ARIN registry).
• Subnet: 104.243.245.0/24.
• Subnet Abuse Density: 0% (low risk).
• BGP Prefix: 104.243.245.0/24 (valid DNSSEC, no RPKI violations).

---

**3. Threat Observations (Last 30 Days)**

• DNSBL Listings (6/10/2026):

- Listed in 8 DNSBLs (high severity risk).

- Resolved as "Minimal" DNSSEC risk (score: 0.15).

• Geolocation Consensus: Confirmed as Mexico City (MaxMind).
• Ownership Stability: No changes in ownership.

---

**4. Neighboring IPs (/24 Subnet)**

• Total Siblings: 25 IPs (10 medium-risk, 15 low-risk).
• Notable Neighbors:

- 104.243.245.7, 104.243.245.20, 104.243.245.223: Moderate risk (50/100).

- 104.243.245.14, 104.243.245.18, 104.243.245.77: Low risk (0/100).

---

**5. Recommendations**

• Monitor DNSSEC Compliance: Address potential DNSSEC validation issues.
• Subnet-Level Monitoring: Track neighbors with moderate risk (e.g., 104.243.245.7).
• Verify Ownership: Confirm private customer use case with ARIN.
• Firewall Rules: Consider blocking high-risk neighbors (e.g., 104.243.245.7) if traffic is observed.

---

Conclusion:

The IP shows no active malicious behavior but has historical DNSBL listings. The subnet has mixed risk, with some neighbors requiring closer inspection. No immediate action is needed, but ongoing monitoring is advised.

*Generated by IPDebrief Threat Intelligence Platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.