# 104.28.159.188 — IP Intelligence Summary

104.28.159.188 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Aulnay-sous-Bois, France. It belongs to datacenter or hosting infrastructure. As of October 6, 2026, IPDebrief rates it Moderate Risk (65/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.28.159.188
- Last updated: 2026-10-06

## Ownership

- Organization: Cloudflare, Inc.
- Network name: CLOUDFLARENET
- Allocated block: 104.16.0.0/12
- ASN: AS13335 (https://ipdebrief.com/asn/13335)
- Regional registry: ARIN

## Location

- City: Aulnay-sous-Bois
- Region: Île-de-France
- Country: France
- Time zone: —

## Network classification

- Infrastructure type: CDN
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (65/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

**IP INTELLIGENCE BRIEFING: 104.28.159.188**

**Executive Summary**

IP address 104.28.159.188 is a Cloudflare CDN infrastructure endpoint with a moderate risk score of 40. The address operates as part of the CLOUDFLARENET network (ASN 13335) within the 104.16.0.0/12 CIDR block. Analysis indicates this is legitimate CDN infrastructure with no active threat indicators, no known campaigns, and no malicious activity observed.

**Infrastructure Profile**

The IP resolves to Cloudflare, Inc. infrastructure with infrastructure type classified as CDN. Network classification confirms cloud-based operations with no residential, mobile, or hosting characteristics. The address is firewalled with no services exposed—no open ports detected, no TLS certificates, and no HTTP services active. DNS analysis shows no PTR hostnames, no forward resolution, and no hosted domains.

**Geolocation**

Multiple geolocation data sources provided conflicting but consistent results. Cymru geolocation identified the IP as located in the United States with coordinates 39.83, -98.58. MaxMind geolocation placed the IP in France, Aulnay-sous-Bois, at coordinates 48.9422, 2.5039. Both positions reflect CDN edge node distribution patterns.

**Threat Indicators**

No threat indicators were identified. The IP is not a Tor exit node, not a known attacker, and not a spam source. Blacklist count remained at zero throughout analysis. Pulsedive risk data and known campaign associations were not populated. No threat feeds reported positive matches.

**Control Plane Analysis**

Origin ASN confirmed as 13335 (Cloudflare). BGP prefix 104.28.159.0/24 shows route instability. DNSSEC validation passed. DNSBL listing count of 2 out of 8 total lists indicates minimal operator score of 0.1304, labeled as "Minimal" risk.

**Historical Observation**

Thirteen observation signals recorded across recent monitoring periods. Ownership changes remained at zero, confirming stable infrastructure ownership. Threat persistence days and threat observation count both remained at zero. The IP is not classified as persistently malicious.

**Neighborhood Assessment**

The 104.28.159.0/24 subnet contains 48 total sibling IPs with 20 active siblings. Abuse density measured at 0.0833, with subnet classification as "mostly_clean." Risk distribution across the subnet showed zero high-risk IPs, 10 medium-risk IPs, and 18 low-risk IPs. Four threat siblings identified within the broader subnet, but none correlated with this specific address.

**Relationship Graph**

All four relationship entries mapped to CLOUDFLARENET network infrastructure, confirming the IP operates within established Cloudflare network boundaries.

**Recommended Actions**

No security actions or firewall rules generated. The IP presents as legitimate CDN infrastructure with no actionable threat indicators requiring blocking or mitigation.

## Nearby addresses

- 104.28.159.2 (https://ipdebrief.com/104.28.159.2)
- 104.28.159.4 (https://ipdebrief.com/104.28.159.4)
- 104.28.159.7 (https://ipdebrief.com/104.28.159.7)
- 104.28.159.8 (https://ipdebrief.com/104.28.159.8)
- 104.28.159.17 (https://ipdebrief.com/104.28.159.17)
- 104.28.159.20 (https://ipdebrief.com/104.28.159.20)
- 104.28.159.21 (https://ipdebrief.com/104.28.159.21)
- 104.28.159.44 (https://ipdebrief.com/104.28.159.44)
- 104.28.159.45 (https://ipdebrief.com/104.28.159.45)
- 104.28.159.46 (https://ipdebrief.com/104.28.159.46)
- 104.28.159.47 (https://ipdebrief.com/104.28.159.47)
- 104.28.159.48 (https://ipdebrief.com/104.28.159.48)

---

Source: IPDebrief, "104.28.159.188 IP intelligence", https://ipdebrief.com/104.28.159.188, updated 2026-10-06. Assessments are probabilistic.