104.28.157.108
104.28.157.108 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to San Jose, United States. It belongs to datacenter or hosting infrastructure. As of November 5, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.
# IP Intelligence Briefing: 104.28.157.108/32
## Executive Summary
IP address 104.28.157.108 is associated with Cloudflare, Inc. infrastructure (104.16.0.0/12, ARIN) and is currently classified as Low Risk with a risk score of 0. The IP presents as a firewalled host with no active services. While current threat indicators are absent, historical data reveals 8 blacklist listings with maximum severity ratings of "high," indicating prior malicious activity associated with this address or its operational context.
## Ownership and Infrastructure
- Organization: Cloudflare, Inc.
- ASN: Not resolved in profile
- CIDR Block: 104.16.0.0/12
- Abuse Contact: abuse@cloudflare.com
- RIR: ARIN
- Geolocation: United States, California (94107)
- Network Role: Firewalled / No Services (isCloud: false, isCdn: false, isProxy: false)
## Threat Assessment
Current Status
- Risk Score: 0 (Low Risk)
- Blacklist Status: 8 total listings, 2 currently active with "high" severity
- Tor Exit: No
- Known Attacker: No
- Spam Source: No
Historical Observations (2026-07-23)
The IP has been observed 10 times. Key signals include:
- RIR Registration: ARIN, Cloudflare, Inc.
- Network Block: 104.16.0.0/12 (CLOUDFLARENET)
- Blacklist Activity: 8 listings with maximum severity "high"
- DNSSEC Status: Minimal (raw score: 0.15)
- Overall Data Confidence: Low (0.1667)
Behavioral Indicators
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
- Total Incidents: 0
- Active Attacker Status: No
## Subnet Analysis (104.28.157.0/24)
- Total Neighbors: 41
- Abuse Density: 0.024 (2.4%)
- Risk Distribution: 1 high, 5 medium, 9 low
Notable High-Risk Neighbors
| IP Address | Risk Score | Authority Score |
|---|---|---|
| 104.28.157.117 | 80 | 85 |
| 104.28.157.3 | 70 | 85 |
| 104.28.157.118 | 65 | 85 |
| 104.28.157.1 | 55 | 85 |
The subnet demonstrates moderate abuse activity with several neighbors exhibiting elevated risk scores, suggesting potential shared infrastructure or lateral threat vectors.
## Network Services
- Open Ports: None detected
- TLS Certificate: None
- HTTP Title: None
- Server Banner: None
- DNS PTR Records: None
- Forward Resolution: Confirmed: No
## Relationships
No direct relationships (subnets, hostnames, organizations, certificates) were identified for this IP address.
## Security Recommendations
Current risk profile (score: 0) does not warrant immediate defensive action. Standard monitoring practices are sufficient. Given historical blacklist activity and subnet abuse density, maintain awareness of:
- Blacklist listing updates
- Neighboring IP risk escalations
- Any service activation on this address
## Conclusion
IP 104.28.157.108 is a Cloudflare infrastructure address with current low-risk characteristics. Historical blacklist associations and elevated risk scores among subnet neighbors warrant continued monitoring, but no immediate blocking or mitigation actions are indicated by the current threat profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 104.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS13335 |
| Network Prefix | 104.28.157.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (85%) — 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-03 04:39:48 UTC |
| Last Seen | 2026-11-05 10:08:58 UTC |
| Profile Built | 2026-11-05 10:13:18 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 18 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 104.28.157.108
Who owns the IP address 104.28.157.108?
104.28.157.108 is registered to Cloudflare, Inc.. The address falls within the 104.16.0.0/12 network block. Registration is held at ARIN.
Where is 104.28.157.108 located?
Geolocation data places 104.28.157.108 in San Jose, California, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 104.28.157.108 malicious or safe?
104.28.157.108 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
Is 104.28.157.108 a VPN, proxy, or data center address?
104.28.157.108 is classified as a content delivery network based on network ownership and behavioural analysis.