Intelligence Briefing for IP Address 104.28.164.226/32
Overview:
The IP address 104.28.164.226/32 was analyzed using available threat intelligence tools to gather comprehensive data on its profile, historical observations, relationships, and neighborhood characteristics. The analysis was conducted to provide a clear understanding of the potential security implications associated with this IP address.
Profile:
- Provider Information: The IP address is assigned to Cloudflare, Inc. This provider is widely recognized for its services in content delivery, DDoS protection, and security services.
- Geolocation: The IP is geographically located in the United States.
Observation History:
- Network Activity: Historical data indicates that this IP address has been involved in legitimate traffic primarily related to Cloudflare's CDN and security services. There have been no significant anomalies or malicious activities reported in connection with this specific IP address.
- Threat Reports: The IP address does not appear in any major threat intelligence databases or repositories for known malicious activities.
Relationships:
- Associated Domains: The IP address serves multiple domains, which are typically protected by Cloudflare's security features. These domains include a diverse range of websites utilizing Cloudflare's services for enhanced performance and security.
- Service Providers: Cloudflare is the primary service provider associated with this IP, indicating that it is part of Cloudflare's network infrastructure.
Neighborhood Data:
- IP Range: The IP address is part of a larger range managed by Cloudflare, which is known for hosting numerous legitimate websites and services.
- Neighboring IPs: Other IPs within the same range are similarly utilized for Cloudflare's CDN and security services, with no indications of malicious activities in the surrounding addresses.
Threat Intelligence Narrative:
The IP address 104.28.164.226/32 is associated with Cloudflare, Inc., and is used for legitimate purposes related to content delivery and security services. Historical data and threat intelligence reports do not indicate any malicious activities linked to this IP address. It serves multiple domains under Cloudflare's protection, contributing to its role in enhancing web performance and security. Given its association with a reputable provider and the absence of negative reports, this IP address is considered benign for security purposes.
Actionable Insights for SOC Analysts:
- Monitoring: Continue routine monitoring of network traffic associated with this IP address to ensure it remains consistent with expected Cloudflare-related activities.
- Verification: Verify traffic patterns and domain associations to ensure they align with legitimate Cloudflare services.
- Alert Configuration: Maintain existing alert configurations, as no immediate threat indicators are associated with this IP address.
This briefing provides a comprehensive overview of the IP address 104.28.164.226/32, supporting SOC teams in making informed decisions regarding network security and threat management.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Cloudflare, Inc. |
| ASN | AS13335 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 24% | 2 | 3 |
| reputation | 24% | 1 | 4 |
| geolocation | 19% | 2 | 2 |
| Overall | 19% | 9 | 15 |
| Data Coherence | Mostly Consistent (85%) β 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-08 11:09:40 UTC |
| Last Seen | 2026-06-25 04:25:14 UTC |
| Profile Built | 2026-06-25 04:26:09 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 17 |
Full dossier details are available via our API.