IP cleanliness report

104.28.162.109

Multi-source IP cleanliness, network ownership, and risk signals.

Checked:2026-10-14 18:03:03 Cloudflare · AS13335 Germany · Dreieich · Medium confidence
42
REPUTATION
Higher scores mean fewer current risk signals
01 · Executive finding

Multiple risk signals

Signals requiring review are present. Check the evidence before important use and retest after changing routes.

单源匿名网络信号
Checked2026-10-14 18:03:03 Score scale0–100 Data coverage16 data sources
02 · Key findings

Risk and clear signals

Review signals that need attention first, followed by key clear findings; only decision-useful evidence is shown here.

Key evidence is ordered by impact; the complete scoring ledger can be expanded in Score composition below.
Needs attention5
IP TypeCloud/VPS Datacenter (CLOUDFLARE) (3 consistent type signals) 15 / 40
VPN Detection1 hit ⚠️ 3 / 8
Proxy Detection1 hit ⚠️ 3 / 7
Scamalytics ScoreMedium(25) ⚠️ 2 / 5
proxycheck RiskHigh(Risk=35) ⚠️ 2 / 5
Key passed checks3
BGP RouteAnnounced and visible ✅ 2 / 2
Bot DetectionNot bot ✅ 1 / 1
Tor DetectionNot Tor ✅ 5 / 5
03 · Score composition

How the score was calculated

Shows the base score, risk deductions, clean confirmation, and final score; the full scoring ledger stays collapsed until needed.

Base45
Deductions-3
Clean confirmation0
Final42
Risk-signal deductionsSingle-source anonymizer signal-3
IP TypeCloud/VPS Datacenter (CLOUDFLARE) (3 consistent type signals)15 / 40
VPN Detection1 hit ⚠️3 / 8
Proxy Detection1 hit ⚠️3 / 7
Scamalytics ScoreMedium(25) ⚠️2 / 5
1 more score-impacting items are included below.
All score checksSources 16/16 · Ceiling 45
Deduction:Single-source anonymizer signalDeducted directly from the base scoreDeducted-3
IP TypeCloud/VPS Datacenter (CLOUDFLARE) (3 consistent type signals)Risk15 / 40
VPN Detection1 hit ⚠️Review3 / 8
Proxy Detection1 hit ⚠️Review3 / 7
Tor DetectionNot Tor ✅Pass5 / 5
Scamalytics ScoreMedium(25) ⚠️Review2 / 5
proxycheck RiskHigh(Risk=35) ⚠️Review2 / 5
Abuse HistoryNo match—
IPsum threat intelligenceNo match—
Feodo TrackerNo match—
Spamhaus DROPNo match—
DShieldNo match—
Threat-feed consensusNo multi-source confirmationNo match—
BGP RouteAnnounced and visible ✅Pass2 / 2
Port ExposureNo reliable exposure dataNo match—
Subnet QualityNo reliable neighbor dataNo match—
Bot DetectionNot bot ✅Pass1 / 1
04 · Network profile

Network identity and location

All geolocation fields remain visible; confidence represents source agreement, not GPS-level physical accuracy.

IP Type Datacenter / Hosting
Proxy Status No Proxy Detected
Network Cloudflare (AS13335)
Location DE · Hessen · Dreieich (Medium confidence)
Location typeVPN exit location5 geolocation sources returned
Country / regionHigh confidence
Germany (DE)4/4 available sources agree
State / provinceMedium confidence
Hessen2/5 available sources agree
City estimateMedium confidence
Dreieich5/5 available sources agree
Postal codeMedium confidence
633033/3 available sources agree
TimezoneHigh confidence
Europe/Berlin5/5 available sources agree
Reference coordinatesMedium confidence
50.02, 8.75/5 available sources agree · coordinate spread about 1 km
View all geolocation sources5
SourceCountryRegionCityCoordinatesTimezone
IPinfoDEHesseDreieich50.02, 8.7Europe/Berlin
IP2LocationDEHessenDreieich50.02, 8.7Europe/Berlin
ipapi.comDEHessenDreieich50.02, 8.7Europe/Berlin
proxycheck.ioDEHesseDreieich50.03, 8.69Europe/Berlin
ipapi.isGermanyHesseDreieich50.02, 8.7Europe/Berlin
05 · Data sources

Source coverage and completion

Lists each source used in this check and its completion state by role; scoring evidence and individual matches remain in the scoring and evidence sections.

Complete16
Not applicable0
Unavailable0
Sources16

Registry1

RIR RDAPComplete

Network identity3

IPinfoComplete
IP2LocationComplete
ipapi.isComplete

Routing and ASN2

RIPEstatComplete
Team CymruComplete

Proxy and reputation3

proxycheck.ioComplete
ipapi.comComplete
ScamalyticsComplete

Threat intelligence6

Spamhaus DROPComplete
IPsumComplete
Feodo TrackerComplete
Tor ProjectComplete
DShieldComplete
Blocklist.deComplete

Internet exposure1

Shodan InternetDBComplete
06 · Report appendix

Report methodology and field snapshot

ScoringFixed-weight aggregation with separate risk deductions
GeolocationDatabase consensus, not the device’s physical location
Snapshot time2026-10-14 18:03:03
06.1 · Report field snapshot
FieldValue
IP Address104.28.162.109
Reputation Score42/100
Cleanliness LevelMultiple signals
IP TypeDatacenter / Hosting
CountryGermany
State / provinceHessen
City estimateDreieich · Medium confidence · 5/5 available sources agree
Postal code63303
TimezoneEurope/Berlin
Reference coordinates50.02, 8.7
ISPCloudflare
ASNAS13335
Proxy/VPNNo
Proxy TypeNone
Datacenter IPYes
Tags单源匿名网络信号
Last Checked2026-10-14 18:03:03
06.2 · Scoring and interpretation
What does the score for 104.28.162.109 mean?

A score of 42/100 means several sources returned signals requiring attention. Exact labels, check time, and original sources are listed in the report.

What type of IP is this?

104.28.162.109 is a datacenter IP on Cloudflare (AS13335) in DE Dreieich.

How is the cleanliness score calculated?

The system queries 16 data sources covering proxy/VPN classification, malicious ranges, threat intelligence, ASN, and port exposure. Evidence is combined with fixed weights into a 0-100 score and is generated only when completeness requirements are met.

What score is safe?

There is no universal safe score for every website. IPRisk summarizes proxy, blacklist, network-type, and threat-intelligence signals; each service has its own rules and may use data not shown here.

06.3 · Related samples on the same ASN

This IP returned multiple risk signals. After changing the exit, return to the IP cleanliness check to retest it, then use the Environment Scan to confirm browser routing consistency.

Check another IP Check browser routes