104.28.162.169📋 Copy

# IP Intelligence Briefing: 104.28.162.169/32

Classification: Low Risk – Infrastructure/CDN

Date: 2026-07-30

Analyst: IPDebrief Intelligence

---

## Executive Summary

IP 104.28.162.169 presents as a low-risk infrastructure address with no active threat indicators. The address belongs to ASN 13335 (Cloudflare) and demonstrates no malicious behavior across all observation vectors. No security actions are recommended at this time.

---

## Infrastructure Profile

Ownership & Geolocation:

• ASN 13335 (Cloudflare)
• Primary Geo: Portugal (PT), Montijo, Setúbal
• Secondary Geo Signals: US (39.83°N, -98.58°W) – conflicting data
• Distance from primary geo: 1,943 km
• Validation Status: ICMP blocked – unable to validate

---

## Threat Analysis

Threat Indicators

• Threat Indicators: None
• Blacklist Count: 0
• Abuse Confidence Score: Not applicable
• Known Campaigns: None
• Threat Feeds: None
• Is Known Attacker: False
• Is Spam Source: False
• Is Tor Exit: False

Network Behavior

• Open Ports: None detected
• Services: No open services
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None

Control Plane

• Operator Score: 0.1304 (Minimal)
• DNSBL Listed: 0 of 8 total lists
• RPKI State: Not available
• IRR Consistency: Not available
• MOAS Status: False

---

## Historical Observation

Observation Count: 10 signals (most recent: 2026-07-30)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Is Persistently Malicious: False

Signal Trends:

• Geo signals show conflicting country data (PT/US)
• Operator score labeled "Minimal" (0.1304)
• No persistent threat behavior detected
• Ports scanned with no active services discovered

---

## Neighborhood Analysis

Subnet: 104.28.162.0/24

Total Siblings: 57

Abuse Density: 3.5%

Risk Distribution:

• High Risk: 2 IPs
• Medium Risk: 30 IPs
• Low Risk: 25 IPs

Notable Neighbors:

• 104.28.162.2 – Risk: 25, Authority: 85
• 104.28.162.7 – Risk: 25, Authority: 85
• 104.28.162.8 – Risk: 55, Authority: 85
• 104.28.162.9 – Risk: 40, Authority: 85

Inherited Risk: 0

---

## Relationship Graph

Direct Relationships: None detected

---

## Campaign Correlation

• Campaign Likelihood: Not applicable
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0
• Certificate Subjects: None

---

## Recommended Actions

No Actions Required. The IP presents as legitimate infrastructure with no threat indicators. Standard monitoring practices apply.

---

## Intelligence Assessment

IP 104.28.162.169 is classified as low-risk infrastructure. Key findings:

1. Clean Risk Profile: Zero risk score with no threat indicators

2. CDN/Cloud Infrastructure: Associated with Cloudflare (ASN 13335), consistent with edge caching/firewalling

3. No Service Exposure: No open ports or services detected

4. Subnet Context: 3.5% abuse density in /24 subnet; 2 high-risk siblings identified

5. Temporal Stability: No ownership

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.