# 104.23.245.92 — IP Intelligence Summary

104.23.245.92 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Atlanta, United States. It belongs to datacenter or hosting infrastructure. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.23.245.92
- Last updated: 2026-10-06

## Ownership

- Organization: Cloudflare, Inc.
- Network name: CLOUDFLARENET
- Allocated block: 104.16.0.0/12
- ASN: AS13335 (https://ipdebrief.com/asn/13335)
- Regional registry: ARIN
- Cloud / hosting provider: Cloudflare

## Location

- City: Atlanta
- Region: Georgia
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: CDN
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 104.23.245.92/32

**Classification:** Low Risk | **Infrastructure:** Cloudflare CDN | **Status:** Operational

\## Executive Summary

IP 104.23.245.92 is a Cloudflare CDN endpoint with a risk score of 20 (low risk). The IP belongs to the CLOUDFLARENET infrastructure (ASN 13335) with no observed threat indicators, blacklist entries, or malicious activity. The address is classified as clean within its /24 subnet.

\## Network Profile

\- **Organization:** Cloudflare, Inc.

\- **ASN:** 13335

\- **CIDR Block:** 104.16.0.0/12

\- **Geolocation:** Atlanta, Georgia, US

\- **Infrastructure Type:** Content Delivery Network (CDN)

\- **Service Purpose:** Firewalled / No Services (CDN edge node)

\## Threat Assessment

**Risk Score:** 20/100 (Low Risk)

**Threat Indicators:**

\- No threat indicators observed

\- Blacklist count: 0

\- Not flagged as known attacker, spam source, or Tor exit node

\- No observed campaigns or correlated IPs

**Behavioral Signals:**

\- Zero honeypot hits

\- Zero enumeration strikes

\- No WAF bypass indicators detected

\## Neighborhood Analysis

**Subnet:** 104.23.245.0/24

\- **Abuse Density:** 0 (clean)

\- **Classification:** clean

\- **Total Siblings:** 4

\- **Active Siblings:** 3

\- **Threat Siblings:** 0

**Neighbor Risk Distribution:**

\- 3 neighbors: Low risk (risk score 25, authority score 85)

\- 0 neighbors: Medium/High risk

\- 0 neighbors: Threat-flagged

\## Observation History

**Total Observations:** 17

**Recent Activity:**

\- Most recent signals observed 2026-08-05

\- Geo-location signals consistently reporting US (confidence 0.18)

\- Operator score rated "Minimal" (0.15)

\- No ownership changes recorded

\- No persistent malicious activity detected

**Geo-validation Anomaly:**

\- Traceroute indicates geo-plausibility violation (38ms RTT vs 143.3ms minimum expected for 7165km distance)

\- This is consistent with CDN edge caching and anycast routing patterns typical of Cloudflare infrastructure

\## Related Entities

\- **Network:** CLOUDFLARENET (multiple relationship entries)

\- **No hostname associations**

\- **No certificate associations**

\- **No email authentication records**

\## Recommended Actions

**Firewall/Blocking:** Not recommended

\- Low risk score (20)

\- Legitimate CDN infrastructure

\- No specific firewall rules generated

**Monitoring:** Standard traffic monitoring applies

\- No special indicators requiring heightened attention

\- No actions required based on current risk profile

\## Intelligence Assessment

This IP address represents standard Cloudflare CDN edge infrastructure. The geo-validation RTT discrepancy is consistent with anycast CDN routing patterns and should not be treated as an anomaly. The /24 subnet demonstrates clean abuse density with no threat-adjacent neighbors. SOC analysts should classify this as benign infrastructure with standard CDN traffic patterns.

**Confidence Level:** High

**Data Sources:** IPDebrief full profile, observation history, relationship graph, neighborhood analysis, and action recommendations.

## Nearby addresses

- 104.23.245.1 (https://ipdebrief.com/104.23.245.1)
- 104.23.245.64 (https://ipdebrief.com/104.23.245.64)
- 104.23.245.65 (https://ipdebrief.com/104.23.245.65)
- 104.23.245.69 (https://ipdebrief.com/104.23.245.69)
- 104.23.245.170 (https://ipdebrief.com/104.23.245.170)
- 104.23.245.171 (https://ipdebrief.com/104.23.245.171)

---

Source: IPDebrief, "104.23.245.92 IP intelligence", https://ipdebrief.com/104.23.245.92, updated 2026-10-06. Assessments are probabilistic.