104.28.161.120
104.28.161.120 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Mississauga, Canada. As of September 3, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 104.28.161.120
Classification: Low Risk | Date: 2026-07-28 | Status: Active Monitoring
## Executive Summary
IP address 104.28.161.120 presents a low-risk profile with no active threat indicators. The IP is geolocated to Mississauga, Ontario, Canada and operates within ASN 13335 (Cloudflare infrastructure). No services are actively listening on the target IP, and no historical malicious activity has been observed.
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 0 (Low Risk) |
| **Geolocation** | Mississauga, ON, CA |
| **ASN** | 13335 (Cloudflare) |
| **BGP Prefix** | 104.28.161.0/24 |
| **DNSSEC** | Valid |
| **DNSBL Listings** | 0 |
| **Open Ports** | None detected |
| **Network State** | Firewalled / No Services |
## Threat Assessment
- Abuse Confidence Score: Not applicable (no malicious indicators)
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Historical Threat Persistence: 0 days
- Campaign Correlation: No known associations
## Neighborhood Analysis
The /24 subnet (104.28.161.0/24) contains 33 sibling IPs with an overall abuse density of 0.03. Risk distribution within the subnet:
- High Risk: 1 IP (104.28.161.35, score 80)
- Medium Risk: 8 IPs (scores 40-70)
- Low Risk: 24 IPs
Notable elevated-risk neighbors include:
- 104.28.161.35 (risk: 80, authority: 85)
- 104.28.161.112 (risk: 70, authority: 85)
- 104.28.161.111 (risk: 65, authority: 85)
## Recommendations
- No immediate action required for the target IP.
- Monitor subnet 104.28.161.0/24 for the elevated-risk neighbors identified.
- Blocklist 104.28.161.35 if it correlates with observed malicious traffic.
- Standard logging and monitoring for the subnet is appropriate given the low abuse density.
Analyst Notes: The target IP appears to be a static or CDN-allocated address with no active services. The subnet's low abuse density (0.03) suggests legitimate Cloudflare infrastructure. No relationships to known malicious campaigns were identified.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | CLOUDFLARENET |
| CIDR Block | 104.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS13335 |
| Network Prefix | 104.28.161.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 5 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 23% | 2 | 4 |
| reputation | 23% | 1 | 4 |
| geolocation | 17% | 2 | 3 |
| Overall | 19% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-16 22:51:13 UTC |
| Last Seen | 2026-10-06 09:55:52 UTC |
| Profile Built | 2026-09-03 20:38:29 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 104.28.161.120
Who owns the IP address 104.28.161.120?
104.28.161.120 is registered to Cloudflare, Inc.. The address falls within the 104.16.0.0/12 network block. Registration is held at ARIN.
Where is 104.28.161.120 located?
Geolocation data places 104.28.161.120 in Mississauga, Ontario, Canada. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 104.28.161.120 malicious or safe?
104.28.161.120 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.