104.171.28.171📋 Copy

# IP Intelligence Briefing: 104.171.28.171/32

## Executive Summary

IP address 104.171.28.171 presents a LOW RISK threat profile with a risk score of 15. The address is classified as infrastructure with no active services, though it maintains reverse DNS associations with an email domain. The IP operates within the Windstream Communications LLC (ASN 7029) network infrastructure in New York, US. No active threat indicators were identified.

## Infrastructure Profile

• IP Address: 104.171.28.171/32
• Risk Score: 15 (Low Risk)
• ASN: 7029 (Windstream Communications LLC, US)
• Organization: DOT Holding, Inc.
• Network Block: 104.171.16.0/20
• Geolocation: United States, New York
• Network Role: Provider/Infrastructure
• Service Status: Firewalled / No Services

## DNS and Email Configuration

• Reverse DNS (PTR): prd-bd-ZHWHA5.cleamyemaillist.com
• Forward Resolution: cleamyemaillist.com (1 hostname)
• SPF Record: Present (hasSPF: true)
• DMARC Record: Not configured (hasDMARC: false)
• DNSSEC: Valid
• Certificate Authority Authorization (CAA): Not configured

## Threat Indicators Assessment

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listings: 1 listing identified
• Active Threat Campaigns: None detected
• Reputation: Low Risk

## Historical Observations (16 Total)

Recent signal observations indicate:

• Geolocation Signals: Multiple observations showing United States origin with coordinates varying across the continent
• ASN Consistency: ASN 7029 (Windstream Communications LLC) consistently identified
• DNSSEC Status: Valid throughout observation period
• Blacklist Status: Listed on 8 DNSBLs with 1 active listing at medium severity

## Network Neighborhood Analysis (104.171.28.0/24)

• Total Siblings: 35
• Abuse Density: 0 (Low)
• Risk Distribution:

- High Risk: 0

- Medium Risk: 6

- Low Risk: 17

• Notable Neighbors:

- 104.171.28.127: Risk Score 65 (elevated)

- 104.171.28.47: Risk Score 40

- 104.171.28.64: Risk Score 40

- 104.171.28.117: Risk Score 40

- 104.171.28.134: Risk Score 40

- 104.171.28.151: Risk Score 25

- 104.171.28.211: Risk Score 25

The /24 subnet exhibits mixed risk profiles, with the target IP residing in the low-risk tier of its neighborhood.

## Security Recommendations

No immediate firewall rules or blocking recommendations are warranted based on current risk assessment. The low risk score (15) and absence of active threat indicators support continued monitoring without aggressive blocking measures.

## Intelligence Conclusions

1. Threat Level: LOW - No active malicious activity detected

2. Infrastructure Type: Legitimate network infrastructure with email domain associations

3. Operational Status: Active with proper DNSSEC validation

4. Monitoring Priority: Standard monitoring recommended; no elevated priority required

Recommended Actions:

• Monitor for changes in DNS configuration or email authentication records
• Track neighborhood activity for any escalation in risk profiles
• Review historical blacklist status for potential delisting

---

*Report generated from IPDebrief intelligence platform. Data represents current observations and should be correlated with additional intelligence sources before operational action.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.