# 104.28.157.192 — IP Intelligence Summary

104.28.157.192 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Vantaa, Finland. It belongs to datacenter or hosting infrastructure. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.28.157.192
- Last updated: 2026-10-06

## Ownership

- Organization: Cloudflare, Inc.
- Network name: CLOUDFLARENET
- Allocated block: 104.16.0.0/12
- ASN: AS13335 (https://ipdebrief.com/asn/13335)
- Regional registry: ARIN

## Location

- City: Vantaa
- Region: Uusimaa
- Country: Finland
- Time zone: —

## Network classification

- Infrastructure type: CDN
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP Intelligence Briefing: 104.28.157.192/32

\### Executive Summary

IP address 104.28.157.192 presents as a **Low Risk** endpoint with a risk score of 15. The address appears to be part of Cloudflare's infrastructure (ASN 13335, BGP prefix 104.28.157.0/24) with no open services detected. No active threat indicators, blacklist listings beyond minor DNSBL presence, or known malicious campaigns were identified.

\### Risk Profile

| Metric | Value |

|--------|-------|

| **Risk Score** | 15 |

| **Reputation** | Low Risk |

| **Abuse Confidence** | Not applicable |

| **DNSBL Listed** | 1 of 8 lists |

| **Threat Indicators** | None |

\### Technical Classification

\- **Network Role**: Firewalled / No Services

\- **Infrastructure Type**: CDN/Edge Infrastructure

\- **Geolocation**: Mixed signals—US coordinates (39.83°N, -98.58°W) and Finland (Vantaa, 60.3001°N, 25.055°E) detected with low confidence

\- **DNS Status**: Forward resolution not confirmed; no PTR records

\- **Services**: No open ports detected

\### Neighborhood Analysis

The /24 subnet (104.28.157.0/24) contains 42 neighboring IPs with an abuse density of 0.024. Risk distribution shows:

\- **High Risk**: 1 IP (104.28.157.117, score 80)

\- **Medium Risk**: 10 IPs (scores 40-65)

\- **Low Risk**: 29 IPs

Notable elevated-risk neighbors include 104.28.157.1 (55), 104.28.157.3 (70), and 104.28.157.118 (65). Despite this, the target IP itself shows no inherited threat patterns.

\### Historical Observations

Nine signal observations recorded between July 2026. Recent subnet classification indicates "mostly_clean" status with 19 active siblings out of 43 total. No persistent malicious behavior or ownership changes detected. Geolocation signals varied across probes, consistent with anycast CDN deployments.

\### Relationships

No direct relationships identified with other IPs, hostnames, organizations, or certificates.

\### Recommended Actions

No specific firewall rules or mitigation actions recommended. The IP's low-risk profile and CDN infrastructure classification suggest it is a legitimate edge node. Standard monitoring practices apply; no blocking required.

**Analyst Note**: This address is part of Cloudflare's edge network. The mixed geolocation signals are expected behavior for anycast infrastructure. Monitor for any behavioral changes, but current data indicates benign operation.

## Nearby addresses

- 104.28.157.1 (https://ipdebrief.com/104.28.157.1)
- 104.28.157.2 (https://ipdebrief.com/104.28.157.2)
- 104.28.157.3 (https://ipdebrief.com/104.28.157.3)
- 104.28.157.4 (https://ipdebrief.com/104.28.157.4)
- 104.28.157.13 (https://ipdebrief.com/104.28.157.13)
- 104.28.157.14 (https://ipdebrief.com/104.28.157.14)
- 104.28.157.15 (https://ipdebrief.com/104.28.157.15)
- 104.28.157.20 (https://ipdebrief.com/104.28.157.20)
- 104.28.157.21 (https://ipdebrief.com/104.28.157.21)
- 104.28.157.22 (https://ipdebrief.com/104.28.157.22)
- 104.28.157.23 (https://ipdebrief.com/104.28.157.23)
- 104.28.157.24 (https://ipdebrief.com/104.28.157.24)

---

Source: IPDebrief, "104.28.157.192 IP intelligence", https://ipdebrief.com/104.28.157.192, updated 2026-10-06. Assessments are probabilistic.