104.168.198.241📋 Copy

IP Intelligence Briefing: 104.168.198.241

*Generated via IPDebrief Analysis*

---

**Core Profile**

• Risk Score: Moderate (65/100)
• Provider: Hostwinds (AS54290)
• Geolocation: US-based, no precise city/region data
• Ownership: HostPapa, ARIN-registed, abuse contact available
• Network Role: Hosting infrastructure (firewalled, no services detected)
• DNS: Resolves to `hwsrv-637309.hostwindsdns.com` (Hostwinds DNS)
• Threat Indicators: No malicious activity detected (zero threat feeds, no spam, no known attackers)

---

**Observation History**

• Recent Signals (2026-06-10):

- DNSSEC validation confirmed.

- 3 DNSBL listings (low-severity).

- Operator score: "Basic" (0.26), indicating standard infrastructure.

- No recent scans, malware, or campaign activity.

• Trend: Stable, no upward risk trajectory.

---

**Relationships**

• DNS Associations: Linked to `hwsrv-637309.hostwindsdns.com` (Hostwinds).
• Network Affiliation: Part of `HOSTWINDS-17-7` network (BGP prefix 104.168.128.0/17).
• No External Threat Links: No correlated IPs, campaigns, or certificates.

---

**Neighborhood Analysis**

• Subnet: 104.168.198.241/24
• Abuse Density: 0% (clean subnet)
• Neighbors: No active sibling IPs detected.

---

**Actionable Insights**

• No Immediate Threat: The IP is a hosting server with no malicious indicators.
• Monitor DNS: While DNSSEC is valid, the DNSBL listings may warrant closer scrutiny (e.g., verify if legitimate).
• Network Segmentation: Given its hosting role, ensure isolation from critical assets.
• Provider Context: Hostwinds is a legitimate provider, but validate any anomalies in their network.

Conclusion: Low-risk, non-malicious infrastructure. No action required unless new threats emerge.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.