# 104.28.159.178 — IP Intelligence Summary

104.28.159.178 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Hounslow, United Kingdom. It belongs to datacenter or hosting infrastructure. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.28.159.178
- Last updated: 2026-10-06

## Ownership

- Organization: Cloudflare, Inc.
- Network name: CLOUDFLARENET
- Allocated block: 104.16.0.0/12
- ASN: AS13335 (https://ipdebrief.com/asn/13335)
- Regional registry: ARIN

## Location

- City: Hounslow
- Region: England
- Country: United Kingdom
- Time zone: —

## Network classification

- Infrastructure type: CDN
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## INTELLIGENCE BRIEFING: 104.28.159.178/32

\### EXECUTIVE SUMMARY

IP 104.28.159.178 is a low-risk infrastructure address belonging to Cloudflare, Inc., operating as a Content Delivery Network (CDN) service. The address demonstrates minimal threat indicators and is classified as part of legitimate cloud infrastructure. No immediate defensive action required beyond standard CDN handling.

\---

\### PROFILE SUMMARY

| Attribute | Value |

|-----------|-------|

| **Risk Score** | 15/100 (Low Risk) |

| **Organization** | Cloudflare, Inc. |

| **ASN** | 13335 (CLOUDFLARENET) |

| **CIDR Block** | 104.16.0.0/12 |

| **Geolocation** | Hounslow, England, United Kingdom |

| **Coordinates** | 51.47°N, 0.36°W |

| **Timezone** | Europe/London |

\---

\### NETWORK CLASSIFICATION

\- **Infrastructure Type:** CDN (Content Delivery Network)

\- **Connection Type:** Firewalled / No Services Detected

\- **Open Ports:** None

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Blacklist Count:** 0

\---

\### THREAT INDICATORS

\- **Abuse Confidence Score:** Not applicable

\- **Known Campaigns:** None detected

\- **Threat Feeds:** No indicators present

\- **DNSBL Status:** Listed on 1 of 8 DNSBLs (dnsblListedCount)

\- **RPKI State:** Not available

\- **Route Stability:** Not stable (routeChanges30d: 0)

\---

\### NEIGHBORHOOD ANALYSIS (104.28.159.0/24)

| Metric | Value |

|--------|-------|

| **Subnet Abuse Density** | 0.0816 (8.16%) |

| **Classification** | Mostly Clean |

| **Total Siblings** | 49 |

| **Active Siblings** | 21 |

| **Threat Siblings** | 4 |

| **Risk Distribution** | 0 High, 15 Medium, 21 Low |

\---

\### OBSERVATION HISTORY

Twelve signal observations recorded. Most recent data from 2026-07-24 indicates:

\- **Geolocation:** Consistent Hounslow, England location

\- **Network Role:** CDN classification maintained

\- **DNSSEC:** Valid

\- **Threat Persistence:** 0 days (no persistent malicious activity)

\---

\### RELATIONSHIPS

Two network relationships identified, both associated with CLOUDFLARENET. No associations with malicious hosts, spam sources, or known bad actors.

\---

\### RECOMMENDED ACTIONS

\- **Firewall Rules:** No specific rules generated (low risk profile)

\- **Monitoring:** Standard CDN traffic handling recommended

\- **Threat Response:** No active threats requiring intervention

\- **Classification:** Allow with standard CDN inspection policies

\---

\### ANALYST NOTES

This IP represents legitimate Cloudflare CDN infrastructure. The single DNSBL listing is consistent with CDN operational patterns and does not indicate malicious activity. The low risk score (15/100) and absence of threat indicators support routine processing. Neighborhood analysis shows typical CDN subnet behavior with 8.16% abuse density—within normal operational parameters for a major CDN provider.

**Classification:** LOW RISK — No defensive action required

**Priority:** Routine monitoring

## Nearby addresses

- 104.28.159.2 (https://ipdebrief.com/104.28.159.2)
- 104.28.159.4 (https://ipdebrief.com/104.28.159.4)
- 104.28.159.7 (https://ipdebrief.com/104.28.159.7)
- 104.28.159.8 (https://ipdebrief.com/104.28.159.8)
- 104.28.159.17 (https://ipdebrief.com/104.28.159.17)
- 104.28.159.20 (https://ipdebrief.com/104.28.159.20)
- 104.28.159.21 (https://ipdebrief.com/104.28.159.21)
- 104.28.159.44 (https://ipdebrief.com/104.28.159.44)
- 104.28.159.45 (https://ipdebrief.com/104.28.159.45)
- 104.28.159.46 (https://ipdebrief.com/104.28.159.46)
- 104.28.159.47 (https://ipdebrief.com/104.28.159.47)
- 104.28.159.48 (https://ipdebrief.com/104.28.159.48)

---

Source: IPDebrief, "104.28.159.178 IP intelligence", https://ipdebrief.com/104.28.159.178, updated 2026-10-06. Assessments are probabilistic.