# 104.28.161.120 — IP Intelligence Summary

104.28.161.120 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Mississauga, Canada. As of September 3, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.28.161.120
- Last updated: 2026-09-03

## Ownership

- Organization: Cloudflare, Inc.
- Network name: CLOUDFLARENET
- Allocated block: 104.16.0.0/12
- ASN: AS13335 (https://ipdebrief.com/asn/13335)
- Regional registry: ARIN

## Location

- City: Mississauga
- Region: Ontario
- Country: Canada
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 104.28.161.120

**Classification:** Low Risk | **Date:** 2026-07-28 | **Status:** Active Monitoring

\## Executive Summary

IP address 104.28.161.120 presents a low-risk profile with no active threat indicators. The IP is geolocated to Mississauga, Ontario, Canada and operates within ASN 13335 (Cloudflare infrastructure). No services are actively listening on the target IP, and no historical malicious activity has been observed.

\## Technical Profile

| Attribute | Value |

|-----------|-------|

| **Risk Score** | 0 (Low Risk) |

| **Geolocation** | Mississauga, ON, CA |

| **ASN** | 13335 (Cloudflare) |

| **BGP Prefix** | 104.28.161.0/24 |

| **DNSSEC** | Valid |

| **DNSBL Listings** | 0 |

| **Open Ports** | None detected |

| **Network State** | Firewalled / No Services |

\## Threat Assessment

\- **Abuse Confidence Score:** Not applicable (no malicious indicators)

\- **Known Attacker:** No

\- **Tor Exit Node:** No

\- **Spam Source:** No

\- **Historical Threat Persistence:** 0 days

\- **Campaign Correlation:** No known associations

\## Neighborhood Analysis

The /24 subnet (104.28.161.0/24) contains 33 sibling IPs with an overall abuse density of 0.03. Risk distribution within the subnet:

\- **High Risk:** 1 IP (104.28.161.35, score 80)

\- **Medium Risk:** 8 IPs (scores 40-70)

\- **Low Risk:** 24 IPs

Notable elevated-risk neighbors include:

\- 104.28.161.35 (risk: 80, authority: 85)

\- 104.28.161.112 (risk: 70, authority: 85)

\- 104.28.161.111 (risk: 65, authority: 85)

\## Recommendations

\- **No immediate action required** for the target IP.

\- **Monitor subnet 104.28.161.0/24** for the elevated-risk neighbors identified.

\- **Blocklist 104.28.161.35** if it correlates with observed malicious traffic.

\- Standard logging and monitoring for the subnet is appropriate given the low abuse density.

**Analyst Notes:** The target IP appears to be a static or CDN-allocated address with no active services. The subnet's low abuse density (0.03) suggests legitimate Cloudflare infrastructure. No relationships to known malicious campaigns were identified.

## Nearby addresses

- 104.28.161.12 (https://ipdebrief.com/104.28.161.12)
- 104.28.161.17 (https://ipdebrief.com/104.28.161.17)
- 104.28.161.18 (https://ipdebrief.com/104.28.161.18)
- 104.28.161.20 (https://ipdebrief.com/104.28.161.20)
- 104.28.161.22 (https://ipdebrief.com/104.28.161.22)
- 104.28.161.25 (https://ipdebrief.com/104.28.161.25)
- 104.28.161.28 (https://ipdebrief.com/104.28.161.28)
- 104.28.161.29 (https://ipdebrief.com/104.28.161.29)
- 104.28.161.35 (https://ipdebrief.com/104.28.161.35)
- 104.28.161.36 (https://ipdebrief.com/104.28.161.36)
- 104.28.161.38 (https://ipdebrief.com/104.28.161.38)
- 104.28.161.39 (https://ipdebrief.com/104.28.161.39)

---

Source: IPDebrief, "104.28.161.120 IP intelligence", https://ipdebrief.com/104.28.161.120, updated 2026-09-03. Assessments are probabilistic.