104.45.208.30📋 Copy

## IP Intelligence Briefing: 104.45.208.30

Executive Summary

IP 104.45.208.30 is a Microsoft Azure cloud infrastructure endpoint with a low-risk profile (risk score: 25). The address is part of Microsoft's global cloud computing network (AS8075, 104.40.0.0/13) and exhibits standard cloud provider behavior with no persistent malicious indicators.

Infrastructure Profile

• Organization: Microsoft Corporation (AS8075)
• Network: MSFT, 104.40.0.0/13
• Location: San Francisco, CA, US (geolocation consensus: true)
• Infrastructure Type: Cloud Computing (Microsoft Azure)
• Risk Score: 25/100 (Low Risk)
• Provider Score: 0
• Authority Score: 0

Network Services

The IP hosts three active services:

• Port 80/tcp: HTTP (web traffic)
• Port 443/tcp: HTTPS (encrypted web traffic)
• Port 22/tcp: SSH (OpenSSH 8.2p1 Ubuntu-4ubuntu0.13)

TLS certificate issued by Let's Encrypt (R13) for domain `social.oneworldonesai.com`, indicating the endpoint serves web content for this domain.

Threat Indicators

• Abuse Confidence Score: Not applicable (low-risk profile)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Threat Persistence: 0 days
• Campaign Likelihood: None

Observation History

27 signal observations recorded with the following key findings:

• Route stability confirmed (isRouteStable: true)
• BGP prefix stable with no route changes in 30-day period
• Operator score: 0.3478 (Basic classification)
• HTTP fingerprinting consistently identifies Apache server with 404 status codes
• Geographic consistency observed between San Francisco and San Jose, CA
• No persistent malicious behavior detected over observation period

Neighborhood Analysis

The /24 subnet (104.45.208.30/24) shows:

• Abuse Density: 0 (mostly clean)
• Total Siblings: 1 (1 active sibling)
• Threat Siblings: 1
• Risk Distribution: No high-risk neighbors identified
• Classification: Mostly clean

Relationship Graph

22 relationships identified, all classified as "Same Network" relationships to Microsoft (MSFT), confirming the IP belongs to Microsoft's corporate network infrastructure.

Recommended Actions

Based on the low-risk profile and cloud infrastructure classification:

• No immediate blocking recommended
• SSH access on port 22 is standard for cloud provider management endpoints
• No specific firewall rules generated
• Continue monitoring for any changes in risk profile

Assessment

The IP address represents legitimate Microsoft Azure cloud infrastructure. The low risk score, clean neighborhood reputation, and absence of malicious threat indicators support continued normal traffic handling. The single DNSBL listing is likely due to standard cloud provider filtering practices rather than malicious activity. No SOC action required beyond standard monitoring.

---

*Report generated: [Current Date]*

*Data source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.