104.131.36.66📋 Copy

# INTELLIGENCE BRIEFING: 104.131.36.66/32

## Executive Summary

IP address 104.131.36.66 is registered to DigitalOcean, LLC and operates within a cloud computing infrastructure in Clifton, New Jersey, US. The IP maintains a moderate risk score of 50 with no persistent malicious indicators observed. The address shows minimal threat persistence and clean neighborhood classification.

## Infrastructure and Ownership

• ASN: 14061 (DigitalOcean, LLC)
• CIDR Block: 104.131.0.0/16
• Network Role: Cloud Compute hosting environment
• Geolocation: Clifton, New Jersey, US
• Registration: ARIN registry
• Abuse Contact: Available via RDAP

## Threat Assessment

The IP address presents a moderate risk profile with the following observations:

No active threat indicators were detected across scanned threat feeds. The IP is not associated with any known campaigns or attacker signatures.

## Network Context and Neighborhood

• Subnet: 104.131.36.66/24
• Abuse Density: 0%
• Classification: Clean
• Active Siblings: 0
• Threat Siblings: 0

The surrounding /24 subnet demonstrates minimal abuse activity with no adjacent IPs flagged as malicious.

## Service Exposure

Active services identified:

• Port 22/TCP: SSH (OpenSSH_8.9p1 Ubuntu-3ubuntu0.16)

No HTTP/HTTPS services detected. No TLS certificates were resolved for this address.

## Observation History

Analysis of 18 historical observations indicates:

• Latest Classification: Clean (2026-08-12)
• Abuse Density Trend: Stable at 0
• Threat Observations: None detected in recent history
• Ownership Changes: 0 recorded

The IP has maintained consistent ownership and classification without escalation in threat indicators.

## Recommended Actions

Based on the moderate risk profile and DNSBL listings, the following rules are recommended for defensive filtering:

iptables:

```

iptables -A INPUT -s 104.131.36.66 -j DROP

```

nftables:

```

nft add rule inet filter input ip saddr 104.131.36.66 drop

```

Cloudflare WAF:

```json

{

"description": "Block 104.131.36.66 — IPDebrief risk score 50",

"action": "block",

"filter": {

"expression": "ip.src eq 104.131.36.66"

}

}

```

AWS WAF:

```json

{

"Addresses": ["104.131.36.66/32"],

"Description": "IPDebrief risk 50"

}

```

Note: These rules are probabilistic and should be combined with other signals before deployment. The IP lacks persistent malicious indicators, and blocking should be reviewed in context of operational requirements.

---

*Report generated by IPDebrief Intelligence Platform. Data based on observed signals as of 2026-08-12.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.