# 104.28.211.105 — IP Intelligence Summary

104.28.211.105 is an IPv4 address operated by Cloudflare, Inc. (AS13335), geolocated to Tokyo, United States. It belongs to datacenter or hosting infrastructure. As of July 23, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.28.211.105
- Last updated: 2026-07-23

## Ownership

- Organization: Cloudflare, Inc.
- Network name: CLOUDFLARENET
- Allocated block: 104.16.0.0/12
- ASN: AS13335 (https://ipdebrief.com/asn/13335)
- Regional registry: ARIN

## Location

- City: Tokyo
- Region: Tokyo
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: CDN
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IPDEBRIEF INTELLIGENCE BRIEFING

**Target IP:** 104.28.211.105/32

**Classification:** Legitimate Infrastructure – CDN (Cloudflare)

**Risk Level:** Low (Score: 25/100)

**Report Date:** Current

\---

\### OWNERSHIP & CLASSIFICATION

The IP address belongs to Cloudflare, Inc. (ASN 13335, CLOUDFLARENET). The network block 104.16.0.0/12 is registered with ARIN and operated as a Content Delivery Network (CDN). The IP is classified as infrastructure with no open services or exposed ports. Geolocation reports United States (Tokyo coordinates with low confidence, consistent with CDN anycast deployment).

\### THREAT ASSESSMENT

Current threat indicators show no malicious activity:

\- **Threat Indicators:** None detected

\- **Blacklist Status:** Listed on 1 of 8 DNSBLs (minimal impact)

\- **Known Attacker:** No

\- **Tor Exit Node:** No

\- **Spam Source:** No

\- **Persistence:** No persistent malicious behavior observed

The IP demonstrates stable ownership with zero changes and zero threat observation days. No known campaigns associated.

\### NETWORK CONTEXT

**Neighborhood Analysis (104.28.211.0/24):**

\- Subnet classification: Clean

\- Abuse density: 0

\- Active siblings: 3 of 8 total

\- Threat siblings: 0

Notable neighbor risk scores:

\- 104.28.211.186: Risk 65, Authority 85

\- 104.28.211.187: Risk 40, Authority 85

\- 104.28.211.188: Risk 40, Authority 85

\- 104.28.211.189: Risk 25, Authority 85

The elevated neighbor scores reflect normal CDN traffic patterns rather than coordinated malicious activity.

\### OBSERVATION HISTORY

Fourteen signal observations collected. Recent activity confirms consistent CDN classification with no threat emergence. Geo-validation shows ICMP blocking (typical for CDN infrastructure). No ownership or classification changes observed during the monitoring period.

\### RELATIONSHIPS

Relationship graph indicates four "Same Network" associations to CLOUDFLARENET. No external hostnames, organizations, or certificate associations detected.

\### RECOMMENDED ACTIONS

No immediate firewall or blocking actions recommended. The IP is classified as legitimate CDN infrastructure with low risk. Monitor as normal traffic. No iptables, nftables, or WAF rules required at this time.

\---

**Analyst Notes:** This IP represents standard Cloudflare CDN infrastructure. The low risk score and clean neighborhood classification support continued monitoring without escalation. Any traffic from this IP should be evaluated in context of the protected domain being served.

## Nearby addresses

- 104.28.211.107 (https://ipdebrief.com/104.28.211.107)
- 104.28.211.186 (https://ipdebrief.com/104.28.211.186)
- 104.28.211.187 (https://ipdebrief.com/104.28.211.187)
- 104.28.211.188 (https://ipdebrief.com/104.28.211.188)
- 104.28.211.189 (https://ipdebrief.com/104.28.211.189)
- 104.28.211.190 (https://ipdebrief.com/104.28.211.190)
- 104.28.211.192 (https://ipdebrief.com/104.28.211.192)
- 104.28.211.194 (https://ipdebrief.com/104.28.211.194)

---

Source: IPDebrief, "104.28.211.105 IP intelligence", https://ipdebrief.com/104.28.211.105, updated 2026-07-23. Assessments are probabilistic.