104.28.163.185📋 Copy

IP Intelligence Briefing: 104.28.163.185

Date: 2026-05-29

---

**1. Core Profile**

• Risk Score: 70 (High Risk)
• Ownership:

- ASN: 13335 (Cloudflare, Inc.)

- Network: CLOUDFLARENET (arin)

- Geolocation: Netherlands (NL), North Holland, city unknown (latitude/longitude null).

• Network Role: CDN (Cloudflare infrastructure).
• Threat Indicators: No detected malware, phishing, or exploit activity.

---

**2. Observation History**

• Latest Scan (2026-05-29):

- No open ports, no TLS certificate, no HTTP title.

- Subnet abuse density: 0.3871 (moderate risk).

• Ownership Stability: Stable (no recent changes).
• Geolocation Discrepancy: Conflicting signals suggest possible U.S. origin (latitude 39.83, longitude -98.58) but no city/region data.

---

**3. Network Relationships**

• Linked Entities:

- Same network: CLOUDFLARENET (repeated in relationships).

• Subnet: 104.28.163.185/24.
• Neighbor Risk Distribution:

- High Risk: 3 IPs (e.g., 104.28.163.192, 104.28.163.200).

- Medium Risk: 24 IPs.

- Low Risk: 5 IPs.

- Abuse Density: 0.091 (low subnet-wide risk).

---

**4. Actionable Insights**

• Monitor Neighbors: High-risk neighbors (e.g., 104.28.163.192) may indicate malicious activity within the subnet.
• Verify Geolocation: Discrepancy between Netherlands and U.S. signals warrants further investigation.
• CDN Context: Cloudflare IPs are generally benign, but ensure no misconfigured services (e.g., exposed ports) are present.
• Blocklist High-Risk Neighbors: Consider blocking IPs like 104.28.163.192 if they are not part of expected traffic.

Recommended Actions:

• Check for misconfigured services on the IP.
• Monitor subnet for unusual traffic patterns.
• Validate geolocation data with additional sources.

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.