# 104.171.28.171 — IP Intelligence Summary 104.171.28.171 is an IPv4 address operated by Dot Holding, Inc. (AS7029), geolocated to New York, United States. Its reverse DNS name is prd-bd-ZHWHA5.cleamyemaillist.com. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/104.171.28.171 - Last updated: 2026-10-07 ## Ownership - Organization: Dot Holding, Inc. - Network name: DOT-NETWORK - Allocated block: 104.171.16.0/20 - ASN: AS7029 (https://ipdebrief.com/asn/7029) - Regional registry: ARIN ## Location - City: New York - Region: US-NY - Country: United States - Time zone: America/New_York ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - prd-bd-ZHWHA5.cleamyemaillist.com - Forward-confirmed: yes ## Analyst narrative \# IP Intelligence Briefing: 104.171.28.171/32 \## Executive Summary IP address 104.171.28.171 presents a **LOW RISK** threat profile with a risk score of 15. The address is classified as infrastructure with no active services, though it maintains reverse DNS associations with an email domain. The IP operates within the Windstream Communications LLC (ASN 7029) network infrastructure in New York, US. No active threat indicators were identified. \## Infrastructure Profile \- **IP Address:** 104.171.28.171/32 \- **Risk Score:** 15 (Low Risk) \- **ASN:** 7029 (Windstream Communications LLC, US) \- **Organization:** DOT Holding, Inc. \- **Network Block:** 104.171.16.0/20 \- **Geolocation:** United States, New York \- **Network Role:** Provider/Infrastructure \- **Service Status:** Firewalled / No Services \## DNS and Email Configuration \- **Reverse DNS (PTR):** prd-bd-ZHWHA5.cleamyemaillist.com \- **Forward Resolution:** cleamyemaillist.com (1 hostname) \- **SPF Record:** Present (hasSPF: true) \- **DMARC Record:** Not configured (hasDMARC: false) \- **DNSSEC:** Valid \- **Certificate Authority Authorization (CAA):** Not configured \## Threat Indicators Assessment \- **Tor Exit Node:** No \- **Known Attacker:** No \- **Spam Source:** No \- **Blacklist Count:** 0 \- **DNSBL Listings:** 1 listing identified \- **Active Threat Campaigns:** None detected \- **Reputation:** Low Risk \## Historical Observations (16 Total) Recent signal observations indicate: \- **Geolocation Signals:** Multiple observations showing United States origin with coordinates varying across the continent \- **ASN Consistency:** ASN 7029 (Windstream Communications LLC) consistently identified \- **DNSSEC Status:** Valid throughout observation period \- **Blacklist Status:** Listed on 8 DNSBLs with 1 active listing at medium severity \## Network Neighborhood Analysis (104.171.28.0/24) \- **Total Siblings:** 35 \- **Abuse Density:** 0 (Low) \- **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 6 \- Low Risk: 17 \- **Notable Neighbors:** \- 104.171.28.127: Risk Score 65 (elevated) \- 104.171.28.47: Risk Score 40 \- 104.171.28.64: Risk Score 40 \- 104.171.28.117: Risk Score 40 \- 104.171.28.134: Risk Score 40 \- 104.171.28.151: Risk Score 25 \- 104.171.28.211: Risk Score 25 The /24 subnet exhibits mixed risk profiles, with the target IP residing in the low-risk tier of its neighborhood. \## Security Recommendations No immediate firewall rules or blocking recommendations are warranted based on current risk assessment. The low risk score (15) and absence of active threat indicators support continued monitoring without aggressive blocking measures. \## Intelligence Conclusions 1. **Threat Level:** LOW - No active malicious activity detected 2. **Infrastructure Type:** Legitimate network infrastructure with email domain associations 3. **Operational Status:** Active with proper DNSSEC validation 4. **Monitoring Priority:** Standard monitoring recommended; no elevated priority required **Recommended Actions:** \- Monitor for changes in DNS configuration or email authentication records \- Track neighborhood activity for any escalation in risk profiles \- Review historical blacklist status for potential delisting \--- *Report generated from IPDebrief intelligence platform. Data represents current observations and should be correlated with additional intelligence sources before operational action.* ## Nearby addresses - 104.171.28.3 (https://ipdebrief.com/104.171.28.3) - 104.171.28.16 (https://ipdebrief.com/104.171.28.16) - 104.171.28.29 (https://ipdebrief.com/104.171.28.29) - 104.171.28.33 (https://ipdebrief.com/104.171.28.33) - 104.171.28.38 (https://ipdebrief.com/104.171.28.38) - 104.171.28.39 (https://ipdebrief.com/104.171.28.39) - 104.171.28.44 (https://ipdebrief.com/104.171.28.44) - 104.171.28.45 (https://ipdebrief.com/104.171.28.45) - 104.171.28.47 (https://ipdebrief.com/104.171.28.47) - 104.171.28.61 (https://ipdebrief.com/104.171.28.61) - 104.171.28.62 (https://ipdebrief.com/104.171.28.62) - 104.171.28.64 (https://ipdebrief.com/104.171.28.64) --- Source: IPDebrief, "104.171.28.171 IP intelligence", https://ipdebrief.com/104.171.28.171, updated 2026-10-07. Assessments are probabilistic.