104.28.158.8📋 Copy

IP Intelligence Briefing: 104.28.158.8

Date: 2026-06-05

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Provider: Cloudflare, Inc. (ASN 13335)
• Geolocation:

- Country: India (IN)

- City: Santa Cruz (plausible discrepancy; coordinates suggest India)

- Coordinates: 19.0812°N, 72.8278°E

• Network Role: CDN infrastructure (Cloudflare)
• Threat Indicators: No malicious activity detected (no blacklists, campaigns, or abuse signals).

---

**2. Observation History**

• Geolocation Consensus: Mixed signals (2 sources).
• Subnet Abuse Density: 0.21 (moderate risk; 3/14 siblings flagged).
• Ownership Stability: No changes detected.
• Threat Persistence: No persistent malicious activity.

---

**3. Relationships**

• Linked Entities:

- Cloudflare’s CDN network (CLOUDFLARENET).

• Subnet: 104.28.158.8/24.
• Key Insight: IP is part of a mixed-risk subnet with 3 high-risk siblings (80–85 authority score).

---

**4. Neighborhood Analysis**

• Subnet: 104.28.158.8/24 (14 IPs).
• Risk Distribution:

- High Risk: 3 IPs (80–85 authority score).

- Medium Risk: 8 IPs (40–70 authority score).

- Low Risk: 2 IPs (25–40 authority score).

• Abuse Density: 23.1% (moderate risk).

---

**5. Actionable Insights**

• No Immediate Threat: The IP itself is low risk, but monitor the subnet for anomalies.
• Geolocation Discrepancy: Coordinates suggest India, but city labels indicate Santa Cruz. Verify data accuracy.
• Subnet Monitoring: Focus on higher-risk neighbors (e.g., 104.28.158.206, 104.28.158.224).
• Cloudflare Context: As a CDN node, this IP may handle legitimate traffic; ensure traffic patterns align with expected CDN behavior.

---

Recommendation: No blocking required. Use threat intelligence feeds to monitor subnet activity and validate geolocation data.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.