104.23.245.92📋 Copy

# IP Intelligence Briefing: 104.23.245.92/32

Classification: Low Risk | Infrastructure: Cloudflare CDN | Status: Operational

## Executive Summary

IP 104.23.245.92 is a Cloudflare CDN endpoint with a risk score of 20 (low risk). The IP belongs to the CLOUDFLARENET infrastructure (ASN 13335) with no observed threat indicators, blacklist entries, or malicious activity. The address is classified as clean within its /24 subnet.

## Network Profile

• Organization: Cloudflare, Inc.
• ASN: 13335
• CIDR Block: 104.16.0.0/12
• Geolocation: Atlanta, Georgia, US
• Infrastructure Type: Content Delivery Network (CDN)
• Service Purpose: Firewalled / No Services (CDN edge node)

## Threat Assessment

Risk Score: 20/100 (Low Risk)

Threat Indicators:

• No threat indicators observed
• Blacklist count: 0
• Not flagged as known attacker, spam source, or Tor exit node
• No observed campaigns or correlated IPs

Behavioral Signals:

• Zero honeypot hits
• Zero enumeration strikes
• No WAF bypass indicators detected

## Neighborhood Analysis

Subnet: 104.23.245.0/24

• Abuse Density: 0 (clean)
• Classification: clean
• Total Siblings: 4
• Active Siblings: 3
• Threat Siblings: 0

Neighbor Risk Distribution:

• 3 neighbors: Low risk (risk score 25, authority score 85)
• 0 neighbors: Medium/High risk
• 0 neighbors: Threat-flagged

## Observation History

Total Observations: 17

Recent Activity:

• Most recent signals observed 2026-08-05
• Geo-location signals consistently reporting US (confidence 0.18)
• Operator score rated "Minimal" (0.15)
• No ownership changes recorded
• No persistent malicious activity detected

Geo-validation Anomaly:

• Traceroute indicates geo-plausibility violation (38ms RTT vs 143.3ms minimum expected for 7165km distance)
• This is consistent with CDN edge caching and anycast routing patterns typical of Cloudflare infrastructure

## Related Entities

• Network: CLOUDFLARENET (multiple relationship entries)
• No hostname associations
• No certificate associations
• No email authentication records

## Recommended Actions

Firewall/Blocking: Not recommended

• Low risk score (20)
• Legitimate CDN infrastructure
• No specific firewall rules generated

Monitoring: Standard traffic monitoring applies

• No special indicators requiring heightened attention
• No actions required based on current risk profile

## Intelligence Assessment

This IP address represents standard Cloudflare CDN edge infrastructure. The geo-validation RTT discrepancy is consistent with anycast CDN routing patterns and should not be treated as an anomaly. The /24 subnet demonstrates clean abuse density with no threat-adjacent neighbors. SOC analysts should classify this as benign infrastructure with standard CDN traffic patterns.

Confidence Level: High

Data Sources: IPDebrief full profile, observation history, relationship graph, neighborhood analysis, and action recommendations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.