23.145.40.108
# IP INTELLIGENCE BRIEFING: 23.145.40.108/32
Classification: Low Risk | Risk Score: 25 | Date: 2026-07-27
## Ownership & Network Profile
The IP address 23.145.40.108 belongs to Ryamer, LLC (AS400587), registered within the ARIN registry. The network block is 23.145.40.0/24. Geolocation data indicates placement in the United States, with Boston, MA as the primary location reference, though historical geolocation signals have shown variation.
## Threat Assessment
Risk assessment places this IP in the Low Risk category (score: 25/100). No active threat indicators were detected across major threat feeds. The IP is not listed as a known attacker, Tor exit node, spam source, or proxy. Blacklist count remains at zero. However, the IP carries a "Tor Exit Nodes" network role classification, indicating infrastructure commonly associated with anonymity services.
## Neighborhood Analysis
The /24 subnet (23.145.40.0/24) exhibits clean classification with an abuse density of 0. No sibling IPs in the neighborhood show malicious activity. The subnet contains only the single target IP with no active siblings detected.
## Control Plane & Infrastructure
Route stability issues are present, with the control plane showing instability in recent 30-day observations. DNSSEC validation is enabled. The IP is not cloud-hosted, CDN-enabled, VPN, or mobile carrier-associated. No open ports or active services were detected; the IP is classified as firewalled with no services running.
## Historical Observations
Signal observation history from July 27, 2026, shows consistent ownership attribution to Ryamer, LLC. One historical signal from the AlienVault OTX feed indicated threat presence with a pulse count of 5. Control plane operator score remains minimal at 0.1304. No significant ownership changes or persistent malicious behavior patterns observed.
## Relationship Graph
The IP has a single relationship entry: "Same Network" linked to organization RYAMER. No associated hostnames, certificates, or related entities were identified.
## Recommended Actions
Given the low risk score (25), clean neighborhood status, and absence of active threat indicators, no immediate firewall rules or blocking actions are recommended. The IP classification as a Tor Exit Node provider should be noted for context but does not warrant defensive action at this time.
Summary: This IP presents minimal immediate threat. While the Tor Exit Node classification is noteworthy for intelligence context, operational observations show no active malicious behavior. SOC teams may monitor but no blocking is required based on current intelligence.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ryamer, LLC |
| ASN | AS400587 |
| Network Name | RYAMER |
| CIDR Block | 23.145.40.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS400587 |
| Network Prefix | 23.145.40.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 5 |
| routing | 17% | 2 | 3 |
| services | 12% | 2 | 2 |
| ownership | 19% | 3 | 4 |
| reputation | 16% | 1 | 3 |
| geolocation | 20% | 2 | 3 |
| Overall | 19% | 12 | 20 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-13 00:52:04 UTC |
| Last Seen | 2026-09-02 16:27:21 UTC |
| Profile Built | 2026-09-02 16:31:02 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 33 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 23.145.40.108
Who owns the IP address 23.145.40.108?
23.145.40.108 is registered to Ryamer, LLC. The address falls within the 23.145.40.0/24 network block. Registration is held at ARIN.
Where is 23.145.40.108 located?
Geolocation data places 23.145.40.108 in Fremont, California, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 23.145.40.108 malicious or safe?
23.145.40.108 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
Is 23.145.40.108 a VPN, proxy, or data center address?
23.145.40.108 is classified as the Tor network based on network ownership and behavioural analysis.