# 104.28.164.157 — IP Intelligence Summary 104.28.164.157 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Reston, United States. As of September 4, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/104.28.164.157 - Last updated: 2026-09-04 ## Ownership - Organization: Cloudflare, Inc. - Network name: CLOUDFLARENET - Allocated block: 104.16.0.0/12 - ASN: AS13335 (https://ipdebrief.com/asn/13335) - Regional registry: ARIN ## Location - City: Reston - Region: Virginia - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 104.28.164.157/32 \## Executive Summary The target IP 104.28.164.157 is a Cloudflare CDN endpoint (ASN 13335) with an overall low-risk profile (risk score 25). No direct threat indicators, blacklist entries, or active attack signatures were identified. The IP operates as a firewalled infrastructure component with no open services. \## Infrastructure Classification \- **Organization:** Cloudflare, Inc. (CLOUDFLARENET) \- **ASN:** 13335 \- **Network Block:** 104.16.0.0/12 \- **Geolocation:** Reston, Virginia, US \- **Infrastructure Type:** CDN/Edge Infrastructure \- **Service State:** Firewalling detected, no active services exposed \- **DNSSEC:** Valid \## Threat Assessment \- **Risk Score:** 25 (Low Risk) \- **Abuse Confidence:** Not applicable (CDN infrastructure) \- **Blacklist Status:** 0 entries \- **Known Threat Campaigns:** None identified \- **Tor Exit/Proxy:** No \- **Known Attacker:** No \## Subnet Context (104.28.164.0/24) \- **Total Siblings:** 37 \- **Active Siblings:** 18 \- **Abuse Density:** 0.028 (moderate) \- **Risk Distribution:** 1 high-risk, 26 medium-risk, 7 low-risk neighbors \- **Notable High-Risk Neighbors:** \- 104.28.164.245 (risk: 80) \- 104.28.164.239 (risk: 65) \- Multiple addresses with risk scores 55-60 \## Observation History (Last 14 Signals) Recent observations (2026-07-27) indicate: \- Subnet classification: "mostly_clean" \- Inherited risk: 2 \- Listed on 8 threat feeds (1 listing active) \- Threat persistence: None detected \- Ownership stability: No changes observed \## Operational Notes \- The IP functions as a Cloudflare edge node, likely terminating TLS traffic and providing DDoS mitigation. \- Firewalling is active on this IP, preventing direct service enumeration. \- DNSSEC validation is enabled. \- Control plane shows route stability issues flagged (isRouteStable: false) but no route changes in 30 days. \## Recommended Actions \- **No immediate blocking required.** This is legitimate CDN infrastructure. \- Monitor for unusual traffic patterns from this IP during incident response. \- If investigating a specific attack involving this IP, correlate with Cloudflare's security dashboard. \- Be aware that the /24 subnet contains elevated-risk neighbors (1 high-risk, 26 medium-risk) — these may require separate investigation if associated with malicious activity. \## Conclusion 104.28.164.157 is legitimate Cloudflare CDN infrastructure with no direct threat indicators. The IP's low-risk profile is consistent with its role as a content delivery edge node. No defensive action required beyond standard monitoring. ## Nearby addresses - 104.28.164.10 (https://ipdebrief.com/104.28.164.10) - 104.28.164.11 (https://ipdebrief.com/104.28.164.11) - 104.28.164.12 (https://ipdebrief.com/104.28.164.12) - 104.28.164.13 (https://ipdebrief.com/104.28.164.13) - 104.28.164.14 (https://ipdebrief.com/104.28.164.14) - 104.28.164.47 (https://ipdebrief.com/104.28.164.47) - 104.28.164.56 (https://ipdebrief.com/104.28.164.56) - 104.28.164.58 (https://ipdebrief.com/104.28.164.58) - 104.28.164.59 (https://ipdebrief.com/104.28.164.59) - 104.28.164.64 (https://ipdebrief.com/104.28.164.64) - 104.28.164.71 (https://ipdebrief.com/104.28.164.71) - 104.28.164.105 (https://ipdebrief.com/104.28.164.105) --- Source: IPDebrief, "104.28.164.157 IP intelligence", https://ipdebrief.com/104.28.164.157, updated 2026-09-04. Assessments are probabilistic.