104.28.159.145📋 Copy

# IP Intelligence Briefing: 104.28.159.145/32

Classification: Cloudflare CDN Edge Infrastructure

Risk Assessment: LOW RISK (Score: 25/100)

Analysis Date: July 28, 2026

---

## Executive Summary

IP address 104.28.159.145 is identified as Cloudflare CDN edge infrastructure operating within the 104.16.0.0/12 address block. The IP exhibits no malicious indicators and maintains a low-risk profile consistent with legitimate content delivery network operations. No immediate security action is required.

---

## Infrastructure Profile

Ownership & Network:

• Organization: Cloudflare, Inc. (ASN 13335)
• Network Name: CLOUDFLARENET
• CIDR Block: 104.16.0.0/12
• RIR: ARIN (Registration: US)

Geolocation:

• Country: United States (US)
• Region/City: New York, NY
• Coordinate Accuracy: ±2,500 km radius
• Distance from Probe: 5,968.4 km

Network Role Classification:

• Infrastructure Type: CDN
• Connection Type: Firewall / No Services
• Cloud Service: Yes
• CDN Status: Active (Confirmed)

---

## Threat Indicators

Malicious Activity Status:

• Threat Score: 25/100 (Low Risk)
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0

Campaign Correlation:

• Known Campaigns: None detected
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

Control Plane Analysis:

• Route Changes (30d): 0
• Route Stability: False (CDN edge node characteristic)
• DNSSEC Valid: Yes
• DNSBL Listed: 1 of 8 total lists
• Operator Risk Score: 0.1304 (Minimal)

---

## Neighborhood Analysis (104.28.159.0/24)

Subnet Risk Profile:

• Abuse Density: 0.1224 (12.24%)
• Classification: Mostly Clean
• Inherited Risk Score: 4/100

Neighbor Distribution:

• Total Siblings: 49
• Active Siblings: 31
• Threat Siblings: 6
• Risk Distribution:

- High Risk: 0

- Medium Risk: 17

- Low Risk: 28

---

## Observational History

Signal Timeline: 15 observations recorded

• Recent Activity: Consistent CDN infrastructure behavior
• Ownership Changes: 0
• Threat Observation Count: 0
• Persistent Malicious Behavior: No

Temporal Indicators:

• Threat persistence days: 0
• Is persistently malicious: False
• Historical stability: High (No ownership changes)

---

## Network Services & DNS

Open Ports: None detected (Firewalled edge node)

TLS Certificate: Not present (CDN edge characteristic)

HTTP Services: No banner/title detected

Forward Resolution: 0 (No reverse DNS records)

Hosted Domains: 0

Email Authentication: SPF/DMARC records not configured (CDN infrastructure)

---

## Recommended Actions

Current Risk Profile: LOW

Recommended Actions: None

Justification: This IP address represents legitimate Cloudflare CDN infrastructure. The low risk score (25), absence of threat indicators, and classification as CDN edge infrastructure indicate no malicious activity. No firewall rules or blocking actions are recommended.

Note: If this IP was previously flagged for suspicious activity, investigate whether the IP has been repurposed. The current profile shows standard CDN behavior with no service exposure typical of malicious infrastructure.

---

## Intelligence Conclusion

104.28.159.145 is legitimate Cloudflare CDN infrastructure with no evidence of malicious activity. The IP operates within a low-abuse-density subnet and exhibits standard CDN edge node characteristics including firewall-protected services, no open ports, and CDN-specific routing behavior. SOC analysts may treat this as trusted infrastructure for CDN-related traffic.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.