# 104.28.157.53 — IP Intelligence Summary

104.28.157.53 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Narita, Japan. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.28.157.53
- Last updated: 2026-10-06

## Ownership

- Organization: Cloudflare, Inc.
- Network name: CLOUDFLARENET
- Allocated block: 104.16.0.0/12
- ASN: AS13335 (https://ipdebrief.com/asn/13335)
- Regional registry: ARIN

## Location

- City: Narita
- Region: Chiba
- Country: Japan
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP Intelligence Briefing: 104.28.157.53/32

**Classification:** Legitimate CDN Infrastructure | **Risk Level:** Low (Score: 15/100)

**Executive Summary**

The target IP 104.28.157.53 is part of Cloudflare's global CDN infrastructure (ASN 13335, CLOUDFLARENET). This IP presents a low-risk profile with standard CDN characteristics and no active threat indicators. The subnet demonstrates minimal abuse density (0.024), consistent with legitimate edge infrastructure operations.

**Ownership and Network Classification**

\- **Organization:** Cloudflare, Inc.

\- **ASN:** 13335 (CLOUDFLARENET)

\- **CIDR Block:** 104.16.0.0/12

\- **Infrastructure Type:** CDN (Content Delivery Network)

\- **Country:** United States (US)

\- **Provider Score:** 0 (Legitimate provider)

\- **Authority Score:** 0

\- **DNSBL Status:** 1 of 8 blacklist listings (classified as medium severity)

**Threat Indicators**

\- **Abuse Confidence Score:** Not applicable (legitimate provider)

\- **Known Attacker Status:** False

\- **Spam Source Status:** False

\- **Tor Exit Node:** False

\- **Known Campaigns:** None detected

\- **Threat Persistence Days:** 0

\- **Total Incidents:** 0

**Observed Signals (Last 14 Observations)**

The IP has demonstrated stable behavior with consistent CDN classification across all observation periods. Recent signals confirm:

\- CDN infrastructure type (confirmed)

\- US geolocation with moderate confidence (0.35)

\- Ownership stability with no changes recorded

\- Subnet abuse density: 0.0952 (9.52%), classified as "mostly_clean"

**Network Neighborhood Analysis (104.28.157.0/24)**

The /24 subnet contains 41 sibling IPs with the following risk distribution:

\- **High Risk:** 1 IP (score 80)

\- **Medium Risk:** 8 IPs (scores 55-70)

\- **Low Risk:** 12 IPs

\- **Clean:** 20 IPs

Notable high-risk neighbors include 104.28.157.117 (risk: 80) and 104.28.157.118 (risk: 65). The target IP (104.28.157.53) with risk score 15 remains within the low-risk cohort.

**Network Behavior**

\- **Connection Type:** CDN edge node

\- **Open Ports:** None detected (firewalled/no services exposed)

\- **TLS Certificate:** Not present

\- **HTTP Services:** No active web services

\- **Anycast:** No

\- **Route Stability:** False (minor route changes in last 30 days)

**Recommended Actions**

No blocking or mitigation actions required. This IP represents legitimate Cloudflare CDN infrastructure. Standard monitoring practices apply. If the IP appears in traffic, verify it's legitimate CDN traffic before any blocking actions.

**SOC Analyst Notes**

This IP should not be treated as malicious. It is part of Cloudflare's edge network and may be legitimately routing traffic for protected websites. If traffic from this IP triggers alerts, investigate the specific traffic patterns rather than the IP itself. The single blacklist listing is likely a false positive or edge-case listing common for large CDN providers.

## Nearby addresses

- 104.28.157.1 (https://ipdebrief.com/104.28.157.1)
- 104.28.157.2 (https://ipdebrief.com/104.28.157.2)
- 104.28.157.3 (https://ipdebrief.com/104.28.157.3)
- 104.28.157.4 (https://ipdebrief.com/104.28.157.4)
- 104.28.157.13 (https://ipdebrief.com/104.28.157.13)
- 104.28.157.14 (https://ipdebrief.com/104.28.157.14)
- 104.28.157.15 (https://ipdebrief.com/104.28.157.15)
- 104.28.157.20 (https://ipdebrief.com/104.28.157.20)
- 104.28.157.21 (https://ipdebrief.com/104.28.157.21)
- 104.28.157.22 (https://ipdebrief.com/104.28.157.22)
- 104.28.157.23 (https://ipdebrief.com/104.28.157.23)
- 104.28.157.24 (https://ipdebrief.com/104.28.157.24)

---

Source: IPDebrief, "104.28.157.53 IP intelligence", https://ipdebrief.com/104.28.157.53, updated 2026-10-06. Assessments are probabilistic.