104.28.157.192
104.28.157.192 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Vantaa, Finland. It belongs to datacenter or hosting infrastructure. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.
## IP Intelligence Briefing: 104.28.157.192/32
Executive Summary
IP address 104.28.157.192 presents as a Low Risk endpoint with a risk score of 15. The address appears to be part of Cloudflare's infrastructure (ASN 13335, BGP prefix 104.28.157.0/24) with no open services detected. No active threat indicators, blacklist listings beyond minor DNSBL presence, or known malicious campaigns were identified.
Risk Profile
| Metric | Value |
|---|---|
| **Risk Score** | 15 |
| **Reputation** | Low Risk |
| **Abuse Confidence** | Not applicable |
| **DNSBL Listed** | 1 of 8 lists |
| **Threat Indicators** | None |
Technical Classification
- Network Role: Firewalled / No Services
- Infrastructure Type: CDN/Edge Infrastructure
- Geolocation: Mixed signals—US coordinates (39.83°N, -98.58°W) and Finland (Vantaa, 60.3001°N, 25.055°E) detected with low confidence
- DNS Status: Forward resolution not confirmed; no PTR records
- Services: No open ports detected
Neighborhood Analysis
The /24 subnet (104.28.157.0/24) contains 42 neighboring IPs with an abuse density of 0.024. Risk distribution shows:
- High Risk: 1 IP (104.28.157.117, score 80)
- Medium Risk: 10 IPs (scores 40-65)
- Low Risk: 29 IPs
Notable elevated-risk neighbors include 104.28.157.1 (55), 104.28.157.3 (70), and 104.28.157.118 (65). Despite this, the target IP itself shows no inherited threat patterns.
Historical Observations
Nine signal observations recorded between July 2026. Recent subnet classification indicates "mostly_clean" status with 19 active siblings out of 43 total. No persistent malicious behavior or ownership changes detected. Geolocation signals varied across probes, consistent with anycast CDN deployments.
Relationships
No direct relationships identified with other IPs, hostnames, organizations, or certificates.
Recommended Actions
No specific firewall rules or mitigation actions recommended. The IP's low-risk profile and CDN infrastructure classification suggest it is a legitimate edge node. Standard monitoring practices apply; no blocking required.
Analyst Note: This address is part of Cloudflare's edge network. The mixed geolocation signals are expected behavior for anycast infrastructure. Monitor for any behavioral changes, but current data indicates benign operation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 104.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS13335 |
| Network Prefix | 104.28.157.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 21% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 14% | 10 | 15 |
| Data Coherence | Mostly Consistent (85%) — 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-17 17:11:34 UTC |
| Last Seen | 2026-10-06 09:45:27 UTC |
| Profile Built | 2026-10-06 09:46:11 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 104.28.157.192
Who owns the IP address 104.28.157.192?
104.28.157.192 is registered to Cloudflare, Inc.. The address falls within the 104.16.0.0/12 network block. Registration is held at ARIN.
Where is 104.28.157.192 located?
Geolocation data places 104.28.157.192 in Vantaa, Uusimaa, Finland. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 104.28.157.192 malicious or safe?
104.28.157.192 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
Is 104.28.157.192 a VPN, proxy, or data center address?
104.28.157.192 is classified as a content delivery network based on network ownership and behavioural analysis.