# 104.171.28.29 — IP Intelligence Summary

104.171.28.29 is an IPv4 address operated by Dot Holding, Inc. (AS7029), geolocated to New York, United States. Its reverse DNS name is prd-bd-UQFJ0C.fastemailclean.com. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.171.28.29
- Last updated: 2026-10-07

## Ownership

- Organization: Dot Holding, Inc.
- Network name: DOT-NETWORK
- Allocated block: 104.171.16.0/20
- ASN: AS7029 (https://ipdebrief.com/asn/7029)
- Regional registry: ARIN

## Location

- City: New York
- Region: US-NY
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- prd-bd-UQFJ0C.fastemailclean.com
- Forward-confirmed: yes

## Analyst narrative

\# IP INTELLIGENCE BRIEFING: 104.171.28.29/32

\## EXECUTIVE SUMMARY

IP 104.171.28.29 is classified as **LOW RISK** with a risk score of 0. The address belongs to Dot Holding, Inc. (NET-NETWORK) and is geolocated to New York, US. No active threat indicators, open services, or malicious behavior have been observed.

\---

\## OWNERSHIP & NETWORK CLASSIFICATION

\- **Organization:** Dot Holding, Inc.

\- **Network Name:** DOT-NETWORK

\- **CIDR Block:** 104.171.16.0/20

\- **RIR:** ARIN

\- **Abuse Contact:** abuse@dotology.com

\- **Registration:** Available via RDAP

\- **Classification:** Infrastructure/Firewalling (no services detected)

\---

\## GEOLOCATION DATA

\- **Country:** United States (US)

\- **Region:** US-NY

\- **City:** New York

\- **Timezone:** America/New_York

\- **Geo Sources:** 1 source confirming location

\- **Geo Consensus:** True

\- **Traceroute:** 30 hops, 18 timed out, transit through Comcast network

\---

\## THREAT INTELLIGENCE

**Current Threat Status:** CLEAN

| Indicator | Status |

|-----------|--------|

| Known Attacker | No |

| Spam Source | No |

| Tor Exit Node | No |

| Blacklist Count | 0 |

| Abuse Confidence Score | N/A |

| Threat Feeds | None detected |

| Known Campaigns | None |

**Behavioral Analysis:**

\- No honeypot hits

\- No enumeration strikes

\- No WAF violations

\- Total incidents: 0

\- Auto-banned: No

\---

\## NETWORK SERVICES & DNS

**Open Ports:** None detected

**TLS Certificate:** None

**HTTP Title:** None

**Forward DNS Resolution:** Not confirmed

**PTR Hostnames:** None

**Hosted Domains:** 0

**Email Reputation:**

\- Has SPF: No

\- Has DMARC: No

\- TXT Record Count: 0

\---

\## SIGNAL OBSERVATION HISTORY

**Total Observations:** 7 signals recorded

**Recent Activity:**

\- **2026-07-17 23:50:21** — Geolocation signal (US, 70% confidence)

\- **2026-07-17 23:49:39** — Operator score (minimal, 30% confidence)

\- **2026-07-17 23:49:35** — Ownership signal (Dot Holding, Inc., 95% confidence)

\- **2026-07-17 23:49:35** — Network registration signal (104.171.16.0/20, ARIN)

**Temporal Analysis:**

\- Ownership changes: 0

\- Threat persistence days: 0

\- Threat observation count: 0

\- Persistently malicious: No

\---

\## NETWORK NEIGHBORHOOD ANALYSIS (104.171.28.0/24)

**Subnet Risk Profile:**

\- **Total Siblings:** 32

\- **Abuse Density:** 0

\- **Subnet Classification:** Low/Medium mix

**Risk Distribution:**

\- High Risk (60-100): 0 IPs

\- Medium Risk (25-59): 6 IPs

\- Low Risk (0-24): 17 IPs

**Elevated-Risk Neighbors:**

\- 104.171.28.127 — Risk Score: 65

\- 104.171.28.114, 104.171.28.151 — Risk Score: 25

\- Multiple IPs with Risk Score: 40

\---

\## RELATIONSHIP GRAPH

**Identified Relationships:** 1

\- **Same Network:** DOT-NETWORK (network-level relationship)

\---

\## SECURITY RECOMMENDATIONS

**Current Risk Level:** LOW

**Recommended Actions:** No immediate action required based on current risk profile.

**Firewall Rules:** None recommended

**Contextual Notes:**

\- The IP shows no active malicious indicators

\- No open services detected (firewalled/no services)

\- Neighborhood contains some elevated-risk siblings, but target IP remains clean

\- Standard monitoring and logging recommended as best practice

\---

\## INTELLIGENCE CONCLUSION

IP 104.171.28.29 presents a **LOW RISK** profile with no observable malicious behavior. The address is assigned to Dot Holding, Inc. infrastructure and appears to be firewalling or administrative infrastructure with no exposed services. While the /24 subnet contains 6 medium-risk neighbors, the target IP itself maintains a risk score of 0 with zero blacklist associations. Standard defensive monitoring is recommended; no immediate blocking or alerting actions are warranted.

## Nearby addresses

- 104.171.28.3 (https://ipdebrief.com/104.171.28.3)
- 104.171.28.16 (https://ipdebrief.com/104.171.28.16)
- 104.171.28.33 (https://ipdebrief.com/104.171.28.33)
- 104.171.28.38 (https://ipdebrief.com/104.171.28.38)
- 104.171.28.39 (https://ipdebrief.com/104.171.28.39)
- 104.171.28.44 (https://ipdebrief.com/104.171.28.44)
- 104.171.28.45 (https://ipdebrief.com/104.171.28.45)
- 104.171.28.47 (https://ipdebrief.com/104.171.28.47)
- 104.171.28.61 (https://ipdebrief.com/104.171.28.61)
- 104.171.28.62 (https://ipdebrief.com/104.171.28.62)
- 104.171.28.64 (https://ipdebrief.com/104.171.28.64)
- 104.171.28.75 (https://ipdebrief.com/104.171.28.75)

---

Source: IPDebrief, "104.171.28.29 IP intelligence", https://ipdebrief.com/104.171.28.29, updated 2026-10-07. Assessments are probabilistic.
