104.28.163.35📋 Copy

IP Intelligence Briefing: 104.28.163.35

Date: 2026-06-06

1. Profile Summary

• Risk Score: Moderate (40/100)
• Provider: Cloudflare, Inc. (ASN 13335)
• Geolocation: Singapore (SG)
• Network Role: CDN infrastructure (no open ports, no services detected)
• Threat Indicators: No malicious activity observed; no blacklist entries or known campaigns.

2. Observation History

• First recorded on 2026-05-29 with geolocation data.
• No significant changes in risk signals over time.
• Mixed network activity with 16 observations, including geolocation, network scans, and subnet analysis.

3. Relationships & Subnet

• Part of CLOUDFLARENET (104.28.163.0/24).
• Subnet abuse density: 0.091 (low overall, but 11 neighbors flagged as "threat siblings").
• Neighboring IPs show mixed risk:

- High-risk neighbors: 3 IPs (risk scores 65–80).

- Medium-risk neighbors: 24 IPs (risk scores 25–40).

- Low-risk neighbors: 5 IPs (risk scores 0–25).

4. Network Behavior

• BGP Analysis: Stable route with no recent changes.
• DNS: No PTR records or domain associations.
• TLS/HTTP: No certificates or open HTTP services detected.

5. Recommendations

• Monitor subnet for unusual traffic due to presence of high-risk neighbors.
• Consider blocking high-risk neighbors (e.g., 104.28.163.92, 104.28.163.116) if they are not part of expected traffic.
• Maintain standard security rules for Cloudflare IPs, as they are legitimate CDN infrastructure.

Conclusion:

The IP is associated with Cloudflare’s CDN and shows no direct malicious activity. However, its subnet contains higher-risk neighbors, warranting closer monitoring to mitigate potential lateral movement or compromised nodes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.