# 104.28.156.248 — IP Intelligence Summary 104.28.156.248 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Singapore, United States. It belongs to datacenter or hosting infrastructure. As of August 28, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/104.28.156.248 - Last updated: 2026-08-28 ## Ownership - Organization: Cloudflare, Inc. - Network name: CLOUDFLARENET - Allocated block: 104.16.0.0/12 - ASN: AS13335 (https://ipdebrief.com/asn/13335) - Regional registry: ARIN ## Location - City: Singapore - Region: — - Country: United States - Time zone: — ## Network classification - Infrastructure type: CDN - Datacenter / hosting: yes - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Moderate Risk (40/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 104.28.156.248/32 **Classification:** Low-Risk CDN Infrastructure **Date:** 2026-07-24 **Analyst:** IPDebrief Intelligence Team \--- \## Executive Summary IP address 104.28.156.248 operates as Cloudflare CDN infrastructure with a low-risk reputation profile. The address belongs to Cloudflare, Inc. (AS13335) within the CLOUDFLARENET CIDR block. Risk assessment indicates minimal threat activity with a current risk score of 15. No active malicious campaigns or attacker indicators were detected. \--- \## Infrastructure Profile | Attribute | Value | |-----------|-------| | **IP Address** | 104.28.156.248/32 | | **ASN** | 13335 (Cloudflare, Inc.) | | **Organization** | Cloudflare, Inc. | | **Network** | CLOUDFLARENET (104.16.0.0/12) | | **Infrastructure Type** | CDN | | **Country** | United States | | **Geolocation** | Singapore | | **Risk Score** | 15 (Low Risk) | | **Abuse Confidence** | Not reported | | **DNSBL Listings** | 1 of 8 lists | \--- \## Threat Indicators Assessment **Active Threat Indicators:** None detected \- Tor Exit Node: No \- Known Attacker: No \- Spam Source: No \- Campaign Association: None \- Blacklist Count: 0 **Behavioral Analysis:** \- Open Ports: None detected \- TLS Certificates: None detected \- Service Banners: None detected \- HTTP Title: None detected **Control Plane:** \- BGP Prefix: 104.28.156.0/24 \- Route Stability: False \- DNSSEC Validated: Yes \- Operator Score: 0.1304 (Minimal) \--- \## Neighborhood Analysis (104.28.156.0/24) | Metric | Value | |--------|-------| | **Total Siblings** | 54 | | **Active Siblings** | 19 | | **Threat Siblings** | 4 | | **Abuse Density** | 0.019 | | **Subnet Classification** | Mostly Clean | | **Inherited Risk** | 2 | | **Risk Distribution** | High: 1, Medium: 12, Low: 23 | **High-Risk Neighbors Identified:** \- 104.28.156.34 (Risk: 25, Authority: 85) \- 104.28.156.41 (Risk: 25, Authority: 85) \- 104.28.156.53 (Risk: 40, Authority: 85) \- 104.28.156.63 (Risk: 30, Authority: 85) The subnet maintains a clean profile with minimal abuse density, consistent with typical CDN infrastructure characteristics. \--- \## Historical Signal Observations **Observation Count:** 14 signals recorded **Key Historical Signals:** \- CDN classification confirmed across multiple observations \- Geolocation consistency: US region with varying city reports \- Ownership stability: No changes detected \- Threat persistence: None observed \- Infrastructure type: CDN (confirmed) Recent observations indicate stable operational characteristics with no degradation in risk profile over the observation period. \--- \## Relationship Graph **Identified Relationships:** 3 \- Same Network: CLOUDFLARENET (Cloudflare infrastructure) All relationships point to Cloudflare's network infrastructure, confirming this address operates within the Cloudflare CDN ecosystem. \--- \## Recommended Security Actions **Classification:** Low Risk - No Immediate Action Required **Recommended Actions:** 1. **Monitoring:** Standard CDN traffic monitoring applies 2. **Firewall Rules:** No blocking recommended 3. **WAF Rules:** No specific rules required 4. **Incident Response:** No action required unless abuse is observed from this address **Rationale:** This IP represents legitimate Cloudflare CDN infrastructure with low-risk characteristics. Standard CDN egress traffic should be permitted. No evidence of malicious activity or abuse patterns detected. \--- \## Conclusion IP 104.28.156.248 operates as legitimate Cloudflare CDN infrastructure with a low-risk profile. The address shows no active threat indicators and maintains stability within the Cloudflare network. The surrounding subnet (104.28.156.0/24) demonstrates minimal abuse density with 4 threat siblings out of 54 total addresses. SOC teams should classify this as routine CDN infrastructure requiring standard monitoring practices. No immediate blocking or remediation actions are warranted. **Status:** Cleared for normal operation **Review Cycle:** Standard (monthly recommended) ## Nearby addresses - 104.28.156.22 (https://ipdebrief.com/104.28.156.22) - 104.28.156.34 (https://ipdebrief.com/104.28.156.34) - 104.28.156.41 (https://ipdebrief.com/104.28.156.41) - 104.28.156.42 (https://ipdebrief.com/104.28.156.42) - 104.28.156.51 (https://ipdebrief.com/104.28.156.51) - 104.28.156.53 (https://ipdebrief.com/104.28.156.53) - 104.28.156.59 (https://ipdebrief.com/104.28.156.59) - 104.28.156.60 (https://ipdebrief.com/104.28.156.60) - 104.28.156.61 (https://ipdebrief.com/104.28.156.61) - 104.28.156.62 (https://ipdebrief.com/104.28.156.62) - 104.28.156.63 (https://ipdebrief.com/104.28.156.63) - 104.28.156.64 (https://ipdebrief.com/104.28.156.64) --- Source: IPDebrief, "104.28.156.248 IP intelligence", https://ipdebrief.com/104.28.156.248, updated 2026-08-28. Assessments are probabilistic.