Extreme Threat
IP 104.28.225.185 classified at threat level 10/10 with 10 documented attacks.
Advanced threat indicators confirmed with 78% certainty.
More threatening than 100% of monitored IPs
IP Address
104.28.225.185
IPv4
Public
PL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Poland
Location
Cloudflare, Inc.
ASN 13335
10
Reports
Mixed
Data Source
Threat Categories
Web App Attack
6
Bad Web Bot
3
WP Plugin Scanning
3
WP Config Exposure
3
Hacking
3
WP Version Scanning
2
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 days indicates persistent threat actor operations.
First Observed
10. November 2026
Last Activity
14. November 2026
Recent (7 days)
10 incidents
Reputable Network
This IP is hosted on a network (ASN 13335) with generally good reputation. The ISP Cloudflare, Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
78%
Verified
Confidence History
10. Nov 2026 - 14. Nov 2026
78%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Web App Attack | Honeypot | 75% |
| New | Bad Web Bot Web App Attack | Community | 75% |
| New | WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
| SQL Injection Web App Attack | Honeypot | 75% | |
| Hacking | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Port Scan Hacking WP Config Exposure +9 | Honeypot x13 | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Hacking | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% |
Technical Details
Basic Information
- IP Address
- 104.28.225.185
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
PL
- ASN
- AS13335
- ISP
- Cloudflare, Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 10
- First Reported
- 10 Nov 2026
- Last Reported
- 14 Nov 2026, 10:24
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS13335
Cloudflare, Inc.
IT
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
149
Total IPs Monitored
854
Total Reports
5.7
Reports per IP
Network Context
This IP address belongs to Cloudflare, Inc. (AS13335), which manages 149 IP addresses in our monitoring system. Out of these, 854 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,352,091 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
10
avg: 7
+
Network Comparison
Compared against 10,568 IPs in ASN 13335
Threat Level
10/10
network avg: 6.4
++
Total Reports
10
network avg: 2
++
Network Cloudflare, Inc. has overall threat level 3/10
Geographic Comparison
Compared against 17,981 IPs in PL
Threat Level
10/10
country avg: 5.8
++
Total Reports
10
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
12 Nov 2026
4 reports
Daily Average
0.3
reports/day
Most Active
Thursday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
6
Bad Web Bot
3
Hacking
3
WP Plugin Scanning
3
WP Config Exposure
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
1,232,363 threat incidents tracked globally • Last 24h: 20,563 Logs
FEED
Top Threat Sources
-
01
Brazil261,723 21.2% -
02
United States213,624 17.3% -
03
India104,161 8.5% -
04
China52,537 4.3% -
05
Argentina42,607 3.5% -
06
SC29,487 2.4% -
07
Mexico28,150 2.3% -
08
Russia27,412 2.2% -
09
Germany25,867 2.1% -
10
Colombia24,360 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.4/10
Avg Threat
99%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
104.28.201.73
8/10
Confidence
100%
Reports
65
Location
US
US
104.28.196.78
8/10
Confidence
100%
Reports
36
Location
US
US
104.28.208.85
8/10
Confidence
100%
Reports
34
Location
BD
BD
104.28.240.84
10/10
Confidence
100%
Reports
30
Location
BD
BD
104.28.196.57
8/10
Confidence
100%
Reports
18
Location
FR
FR
104.28.228.55
8/10
Confidence
100%
Reports
17
Location
FR
FR
104.28.246.147
8/10
Confidence
100%
Reports
15
Location
TH
TH
104.28.201.155
8/10
Confidence
100%
Reports
14
Location
US
US
104.28.214.147
8/10
Confidence
100%
Reports
14
Location
TH
TH
104.28.228.57
8/10
Confidence
100%
Reports
14
Location
FR
FR
104.28.240.85
10/10
Confidence
99%
Reports
30
Location
BD
BD
104.28.214.148
8/10
Confidence
99%
Reports
16
Location
TH
TH
104.28.222.16
8/10
Confidence
98%
Reports
36
Location
FI
FI
104.28.228.78
10/10
Confidence
98%
Reports
35
Location
US
US
104.28.196.77
8/10
Confidence
98%
Reports
34
Location
US
US
104.28.228.77
8/10
Confidence
97%
Reports
35
Location
US
US
104.28.208.84
10/10
Confidence
97%
Reports
32
Location
BD
BD
104.28.196.55
8/10
Confidence
97%
Reports
16
Location
FR
FR
104.28.233.155
8/10
Confidence
97%
Reports
13
Location
US
US
104.28.254.16
8/10
Confidence
96%
Reports
44
Location
FI
FI
IPs from the same subnet range, likely same network segment.
14
Related IPs
7.6/10
Avg Threat
26%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
104.28.225.176
8/10
Confidence
54%
Reports
8
Location
RU
RU
104.28.225.85
10/10
Confidence
41%
Reports
5
Location
BR
BR
104.28.225.82
10/10
Confidence
37%
Reports
8
Location
BR
BR
104.28.225.84
10/10
Confidence
27%
Reports
3
Location
BR
BR
104.28.225.175
8/10
Confidence
24%
Reports
4
Location
RU
RU
104.28.225.187
7/10
Confidence
24%
Reports
2
Location
MX
MX
104.28.225.83
7/10
Confidence
24%
Reports
2
Location
BR
BR
104.28.225.106
7/10
Confidence
24%
Reports
1
Location
CN
CN
104.28.225.102
7/10
Confidence
24%
Reports
1
Location
CN
CN
104.28.225.122
6/10
Confidence
23%
Reports
1
Location
DE
DE
104.28.225.177
6/10
Confidence
22%
Reports
1
Location
RU
RU
104.28.225.134
7/10
Confidence
15%
Reports
1
Location
IQ
IQ
104.28.225.184
7/10
Confidence
12%
Reports
1
Location
PL
PL
104.28.225.14
7/10
Confidence
11%
Reports
1
Location
IN
IN
IPs from the same country with similar threat profiles.
15
Related IPs
8.1/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
57.128.222.79
8/10
Confidence
100%
Reports
104
ISP
OVH SAS
70.34.252.163
10/10
Confidence
94%
Reports
66
ISP
The Constant Co...
217.60.33.216
10/10
Confidence
94%
Reports
48
ISP
ExpressHost Ltd
77.83.101.41
10/10
Confidence
93%
Reports
2,553
ISP
Atman Sp. z o.o.
137.74.4.65
7/10
Confidence
91%
Reports
30
ISP
OVH SAS
202.78.163.94
7/10
Confidence
91%
Reports
28
ISP
G-Core Labs S.A.
31.76.94.111
7/10
Confidence
91%
Reports
23
ISP
VPSPay Networks...
176.103.40.251
7/10
Confidence
91%
Reports
16
ISP
ITTMEDIA TELECO...
185.139.124.85
7/10
Confidence
90%
Reports
14
ISP
IWKD
5.183.192.19
7/10
Confidence
90%
Reports
14
ISP
ilios-system
168.222.49.29
10/10
Confidence
90%
Reports
13
ISP
OVH SAS
188.125.33.54
8/10
Confidence
89%
Reports
174
ISP
Polkomtel Sp. z...
109.241.91.250
7/10
Confidence
89%
Reports
20
ISP
Vectra S.A.
91.227.216.62
7/10
Confidence
88%
Reports
19
ISP
FIBERLINK Sp. z...
57.128.239.181
10/10
Confidence
87%
Reports
29
ISP
OVH SAS
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
78%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
123.187.244.19
10/10
Confidence
78%
Reports
19
Location
CN
CN
103.132.243.250
10/10
Confidence
78%
Reports
2,101
Location
IN
IN
213.209.159.236
10/10
Confidence
78%
Reports
1,138
Location
TW
TW
103.106.103.218
10/10
Confidence
78%
Reports
19
Location
IN
IN
66.132.172.175
8/10
Confidence
78%
Reports
9,678
Location
US
US
193.37.32.200
8/10
Confidence
78%
Reports
17
Location
SG
SG
66.132.172.164
8/10
Confidence
78%
Reports
9,603
Location
US
US
66.132.172.166
8/10
Confidence
78%
Reports
9,534
Location
US
US
66.116.207.168
10/10
Confidence
78%
Reports
34
Location
IN
IN
69.5.169.88
8/10
Confidence
78%
Reports
40
Location
DE
DE
91.191.209.118
8/10
Confidence
78%
Reports
2,993
Location
BG
BG
66.132.172.173
8/10
Confidence
78%
Reports
9,510
Location
US
US
179.43.133.154
10/10
Confidence
78%
Reports
7,286
Location
CH
CH
66.132.172.160
8/10
Confidence
78%
Reports
9,637
Location
US
US
66.132.172.165
8/10
Confidence
78%
Reports
9,720
Location
US
US