IP cleanliness report

104.28.197.14

Multi-source IP cleanliness, network ownership, and risk signals.

Checked：2026-10-25 05:00:17 Cloudflare, Inc. · AS13335 Germany · Frankfurt am Main · Medium confidence
9
REPUTATION
Higher scores mean fewer current risk signals
01 · Executive finding

Severe risk signals

Not recommended for IP-quality-sensitive sign-in, registration, payment, or long-lived account sessions. Replace the exit IP and retest first.

单源匿名网络信号欺诈或攻击风险偏高IPsum suspiciousIPsum feed matches
Checked2026-10-25 05:00:17 Score scale0–100 Data coverage16 data sources
02 · Key findings

Risk and clear signals

Review signals that need attention first, followed by key clear findings; only decision-useful evidence is shown here.

Key evidence is ordered by impact; the complete scoring ledger can be expanded in Score composition below.
Needs attention6
IP TypeCloud/VPS Datacenter (CLOUDFLARE) (4 consistent type signals) 15 / 40
VPN Detection1 hit ⚠️ 3 / 8
Proxy Detection1 hit ⚠️ 3 / 7
Scamalytics ScoreMedium(24) ⚠️ 2 / 5
proxycheck RiskVery high(Risk=100) ❌ 0 / 5
Abuse HistoryBlocklist.de abuse-history match ❌ 0 / 5
Key passed checks3
BGP RouteAnnounced and visible ✅ 2 / 2
Bot DetectionNot bot ✅ 1 / 1
Tor DetectionNot Tor ✅ 5 / 5
03 · Score composition

How the score was calculated

Shows the base score, risk deductions, clean confirmation, and final score; the full scoring ledger stays collapsed until needed.

Base40
Deductions-30.5
Clean confirmation0
Final9
Risk-signal deductionsSingle-source anonymizer signal · Elevated fraud or attack risk · IPsum suspicious · IPsum feed matches-30.5
IP TypeCloud/VPS Datacenter (CLOUDFLARE) (4 consistent type signals)15 / 40
VPN Detection1 hit ⚠️3 / 8
Proxy Detection1 hit ⚠️3 / 7
Scamalytics ScoreMedium(24) ⚠️2 / 5
3 more score-impacting items are included below.
All score checksSources 16/16 · Ceiling 45
Deduction：Single-source anonymizer signalDeducted directly from the base scoreDeducted-3
Deduction：Elevated fraud or attack riskDeducted directly from the base scoreDeducted-15
Deduction：IPsum suspiciousDeducted directly from the base scoreDeducted-5
Deduction：IPsum feed matchesDeducted directly from the base scoreDeducted-7.5
IP TypeCloud/VPS Datacenter (CLOUDFLARE) (4 consistent type signals)Risk15 / 40
VPN Detection1 hit ⚠️Review3 / 8
Proxy Detection1 hit ⚠️Review3 / 7
Tor DetectionNot Tor ✅Pass5 / 5
Scamalytics ScoreMedium(24) ⚠️Review2 / 5
proxycheck RiskVery high(Risk=100) ❌Risk0 / 5
Abuse HistoryBlocklist.de abuse-history match ❌Risk0 / 5
IPsum threat intelligenceMedium ⚠️Review1 / 3
Feodo TrackerNo match—
Spamhaus DROPNo match—
DShieldNo match—
Threat-feed consensusNo multi-source confirmationNo match—
BGP RouteAnnounced and visible ✅Pass2 / 2
Port ExposureNo reliable exposure dataNo match—
Subnet QualityNo reliable neighbor dataNo match—
Bot DetectionNot bot ✅Pass1 / 1
04 · Network profile

Network identity and location

All geolocation fields remain visible; confidence represents source agreement, not GPS-level physical accuracy.

IP Type Datacenter / Hosting
Proxy Status No Proxy Detected
Network Cloudflare, Inc. (AS13335)
Location DE · Hesse · Frankfurt am Main (Medium confidence)
Location typeVPN exit location5 geolocation sources returned
Country / regionHigh confidence
Germany (DE)4/4 available sources agree
State / provinceMedium confidence
Hesse4/5 available sources agree
City estimateMedium confidence
Frankfurt am Main5/5 available sources agree
Postal codeLow confidence
659311/3 available sources agree
TimezoneHigh confidence
Europe/Berlin5/5 available sources agree
Reference coordinatesMedium confidence
50.12, 8.685/5 available sources agree · coordinate spread about 1 km
View all geolocation sources5
SourceCountryRegionCityCoordinatesTimezone
IPinfoDEHesseFrankfurt am Main50.12, 8.68Europe/Berlin
IP2LocationDEHessenFrankfurt am Main50.11, 8.68Europe/Berlin
ipapi.comDEHesseFrankfurt am Main50.13, 8.67Europe/Berlin
proxycheck.ioDEHesseFrankfurt am Main50.11, 8.68Europe/Berlin
ipapi.isGermanyHesseFrankfurt am Main50.12, 8.68Europe/Berlin
05 · Data sources

Source coverage and completion

Lists each source used in this check and its completion state by role; scoring evidence and individual matches remain in the scoring and evidence sections.

Complete16
Not applicable0
Unavailable0
Sources16

Registry1

RIR RDAPCLOUDFLARENET · 104.16.0.0/12 · NET-104-16-0-0-1Complete

Network identity3

IPinfoDE · AS13335 Cloudflare, Inc.Complete
IP2LocationDE · AS13335 · CloudFlare Inc. · HostingComplete
ipapi.isGermany · AS13335 · Cloudflare, Inc.Complete

Routing and ASN2

RIPEstatAS13335 · 104.28.197.0/24 · ARIN · Visibility 100%Complete
Team CymruAS13335 · 104.28.197.0/24 · CLOUDFLARENET - Cloudflare, Inc., USComplete

Proxy and reputation3

proxycheck.ioGermany · Cloudflare · hosting · Risk 100Complete
ipapi.comDE · AS13335 · DatacenterComplete
ScamalyticsFraud 24/100 · DatacenterComplete

Threat intelligence6

Spamhaus DROPnot_listedComplete
IPsummedium · 3 feedsComplete
Feodo TrackerComplete
Tor ProjectComplete
DShieldComplete
Blocklist.de1 recordsComplete

Internet exposure1

Shodan InternetDBComplete
06 · Report appendix

Report methodology and field snapshot

ScoringFixed-weight aggregation with separate risk deductions
GeolocationDatabase consensus, not the device’s physical location
Snapshot time2026-10-25 05:00:17
06.1 · Report field snapshot
FieldValue
IP Address104.28.197.14
Reputation Score9/100
Cleanliness LevelHigh-weight signals
IP TypeDatacenter / Hosting
CountryGermany
State / provinceHesse
City estimateFrankfurt am Main · Medium confidence · 5/5 available sources agree
Postal code65931
TimezoneEurope/Berlin
Reference coordinates50.12, 8.68
ISPCloudflare, Inc.
ASNAS13335
Proxy/VPNNo
Proxy TypeNone
Datacenter IPYes
Tags单源匿名网络信号, 欺诈或攻击风险偏高, IPsum suspicious, IPsum feed matches
Last Checked2026-10-25 05:00:17
06.2 · Scoring and interpretation
What does the score for 104.28.197.14 mean?

A score of 9/100 means several sources returned signals requiring attention. Exact labels, check time, and original sources are listed in the report.

What type of IP is this?

104.28.197.14 is a datacenter IP on Cloudflare, Inc. (AS13335) in DE Frankfurt am Main.

How is the cleanliness score calculated?

The system queries 16 data sources covering proxy/VPN classification, malicious ranges, threat intelligence, ASN, and port exposure. Evidence is combined with fixed weights into a 0-100 score and is generated only when completeness requirements are met.

What score is safe?

There is no universal safe score for every website. IPRisk summarizes proxy, blacklist, network-type, and threat-intelligence signals; each service has its own rules and may use data not shown here.

06.3 · Related samples on the same ASN

Other IPs on the Same ASN (AS13335)

104.28.166.47 (HK, 45)104.28.204.181 (US, 45)104.28.153.110 (US, 42)104.28.196.79 (US, 43)1.1.1.1 (AU, 45)104.28.152.175 (US, 45)104.28.197.9 (DE, 45)104.28.220.209 (CN, 42)104.28.211.192 (FR, 45)104.28.233.73 (US, 12)

This IP returned multiple risk signals. After changing the exit, return to the IP cleanliness check to retest it, then use the Environment Scan to confirm browser routing consistency.

Check another IP Check browser routes