Elevated Risk
Elevated threat level 8/10 for IP 104.28.217.140 from 13 reported incidents.
Behavioral profile indicates cyber threat activity with 47% confidence.
More threatening than 92% of monitored IPs
IP Address
104.28.217.140
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
The Netherlands
Location
Cloudflare, Inc.
ASN 13335
13
Reports
Mixed
Data Source
Threat Categories
Web App Attack
10
Hacking
7
SQL Injection
3
Bad Web Bot
1
WP Version Scanning
1
WP Plugin Scanning
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
5. November 2026
Last Activity
5. November 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 13335) with generally good reputation. The ISP Cloudflare, Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
47%
Medium Confidence
Confidence History
2. Jul 2026 - 5. Nov 2026
47%
Current
Stable
Trend
Security Reports (13)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Bad Web Bot Web App Attack | Community | 75% |
| SQL Injection Web App Attack | Honeypot | 75% | |
| SQL Injection Web App Attack | Honeypot | 75% | |
| Hacking | Community | 75% | |
| SQL Injection Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack Hacking | Community | 75% | |
| Web App Attack Hacking | Community | 75% | |
| Web App Attack Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Web App Attack Hacking | Community | 75% | |
| Web App Attack Hacking | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
Technical Details
Basic Information
- IP Address
- 104.28.217.140
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
NL
- ASN
- AS13335
- ISP
- Cloudflare, Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 13
- First Reported
- 2 Jul 2026
- Last Reported
- 5 Nov 2026, 17:23
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS13335
Cloudflare, Inc.
IT
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
149
Total IPs Monitored
854
Total Reports
5.7
Reports per IP
Network Context
This IP address belongs to Cloudflare, Inc. (AS13335), which manages 149 IP addresses in our monitoring system. Out of these, 854 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,326,774 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
13
avg: 7
++
Network Comparison
Compared against 10,456 IPs in ASN 13335
Threat Level
8/10
network avg: 6.4
+
Total Reports
13
network avg: 2
++
Network Cloudflare, Inc. has overall threat level 3/10
Geographic Comparison
Compared against 21,197 IPs in NL
Threat Level
8/10
country avg: 6.3
+
Total Reports
13
country avg: 28
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
5 Nov 2026
1 reports
Daily Average
0
reports/day
Most Active
Tuesday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
10
Hacking
7
SQL Injection
3
WP Plugin Scanning
1
WP Version Scanning
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
1,209,400 threat incidents tracked globally • Last 24h: 32,367 Logs
FEED
Top Threat Sources
-
01
Brazil261,020 21.6% -
02
United States206,812 17.1% -
03
India103,493 8.6% -
04
China50,938 4.2% -
05
Argentina42,404 3.5% -
06
SC29,447 2.4% -
07
Mexico27,915 2.3% -
08
Russia26,976 2.2% -
09
Germany24,364 2% -
10
Colombia24,267 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.9/10
Avg Threat
98%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
104.28.201.73
10/10
Confidence
100%
Reports
56
Location
US
US
104.28.228.77
8/10
Confidence
100%
Reports
31
Location
US
US
104.28.228.78
10/10
Confidence
100%
Reports
30
Location
US
US
104.28.208.85
8/10
Confidence
100%
Reports
30
Location
BD
BD
104.28.196.78
8/10
Confidence
100%
Reports
29
Location
US
US
104.28.208.84
10/10
Confidence
100%
Reports
28
Location
BD
BD
104.28.240.85
10/10
Confidence
100%
Reports
27
Location
BD
BD
104.28.240.84
10/10
Confidence
100%
Reports
26
Location
BD
BD
104.28.196.57
10/10
Confidence
100%
Reports
15
Location
FR
FR
104.28.196.55
8/10
Confidence
100%
Reports
14
Location
FR
FR
104.28.228.55
10/10
Confidence
100%
Reports
13
Location
FR
FR
104.28.196.77
8/10
Confidence
98%
Reports
29
Location
US
US
104.28.228.224
8/10
Confidence
96%
Reports
13
Location
RU
RU
104.28.196.56
8/10
Confidence
95%
Reports
14
Location
FR
FR
104.28.228.57
10/10
Confidence
95%
Reports
11
Location
FR
FR
104.28.254.46
8/10
Confidence
94%
Reports
54
Location
SG
SG
104.28.254.16
8/10
Confidence
94%
Reports
36
Location
FI
FI
172.67.72.24
10/10
Confidence
94%
Reports
16
104.28.246.147
8/10
Confidence
94%
Reports
12
Location
TH
TH
104.28.214.147
8/10
Confidence
94%
Reports
11
Location
TH
TH
IPs from the same subnet range, likely same network segment.
8
Related IPs
8/10
Avg Threat
27%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
104.28.217.138
8/10
Confidence
53%
Reports
13
Location
NL
NL
104.28.217.188
8/10
Confidence
25%
Reports
5
Location
ID
ID
104.28.217.137
10/10
Confidence
24%
Reports
12
Location
NL
NL
104.28.217.139
10/10
Confidence
24%
Reports
7
Location
NL
NL
104.28.217.210
10/10
Confidence
24%
Reports
3
Location
TR
TR
104.28.217.64
6/10
Confidence
23%
Reports
1
Location
DE
DE
104.28.217.63
6/10
Confidence
23%
Reports
1
Location
DE
DE
104.28.217.157
6/10
Confidence
23%
Reports
1
Location
IN
IN
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.156.87.44
10/10
Confidence
100%
Reports
220
ISP
Pfcloud UG (haf...
94.154.43.223
8/10
Confidence
100%
Reports
134
ISP
Storm Industrie...
94.154.43.63
8/10
Confidence
100%
Reports
107
ISP
Storm Industrie...
35.204.39.201
10/10
Confidence
100%
Reports
100
ISP
Google LLC
87.192.41.180
8/10
Confidence
100%
Reports
23
ISP
Fontaine, LLC
45.153.34.178
8/10
Confidence
100%
Reports
20
ISP
TechTies Inc.
203.159.90.15
8/10
Confidence
100%
Reports
17
ISP
1337 Services GmbH
35.204.239.58
8/10
Confidence
100%
Reports
16
ISP
Google LLC
94.154.43.187
8/10
Confidence
99%
Reports
15
ISP
Storm Industrie...
164.92.211.98
8/10
Confidence
98%
Reports
102
ISP
DigitalOcean, LLC
45.156.87.70
10/10
Confidence
98%
Reports
52
ISP
Pfcloud UG (haf...
35.204.168.209
8/10
Confidence
98%
Reports
38
ISP
Google LLC
35.204.96.52
8/10
Confidence
98%
Reports
34
ISP
Google LLC
217.60.76.167
10/10
Confidence
98%
Reports
33
ISP
Iryna Ivanenko
34.91.87.129
8/10
Confidence
98%
Reports
32
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
47%
Avg Confidence
10
High Threat
High-risk network: Majority of related IPs are flagged
35.210.97.202
10/10
Confidence
47%
Reports
3
Location
BE
BE
2804:14d:54a1:8819:f0d2:d8cc:2115:c353
10/10
Confidence
47%
Reports
4
Location
BR
BR
157.230.154.55
10/10
Confidence
47%
Reports
5
Location
US
US
34.95.52.110
8/10
Confidence
47%
Reports
4
Location
CA
CA
217.154.213.84
10/10
Confidence
47%
Reports
12
Location
DE
DE
86.38.187.159
10/10
Confidence
47%
Reports
4
Location
LT
LT
209.139.26.211
6/10
Confidence
47%
Reports
8
Location
US
US
188.241.131.148
6/10
Confidence
47%
Reports
8
Location
US
US
158.94.200.172
6/10
Confidence
47%
Reports
8
Location
US
US
128.121.240.211
6/10
Confidence
47%
Reports
8
Location
US
US
91.132.184.10
6/10
Confidence
47%
Reports
8
Location
US
US
44.220.185.235
10/10
Confidence
47%
Reports
9
Location
US
US
34.181.228.27
8/10
Confidence
47%
Reports
3
Location
US
US
20.46.254.118
10/10
Confidence
47%
Reports
4
Location
US
US
142.93.166.142
10/10
Confidence
47%
Reports
3
Location
DE
DE