104.171.28.29📋 Copy

# IP INTELLIGENCE BRIEFING: 104.171.28.29/32

## EXECUTIVE SUMMARY

IP 104.171.28.29 is classified as LOW RISK with a risk score of 0. The address belongs to Dot Holding, Inc. (NET-NETWORK) and is geolocated to New York, US. No active threat indicators, open services, or malicious behavior have been observed.

---

## OWNERSHIP & NETWORK CLASSIFICATION

• Organization: Dot Holding, Inc.
• Network Name: DOT-NETWORK
• CIDR Block: 104.171.16.0/20
• RIR: ARIN
• Abuse Contact: abuse@dotology.com
• Registration: Available via RDAP
• Classification: Infrastructure/Firewalling (no services detected)

---

## GEOLOCATION DATA

• Country: United States (US)
• Region: US-NY
• City: New York
• Timezone: America/New_York
• Geo Sources: 1 source confirming location
• Geo Consensus: True
• Traceroute: 30 hops, 18 timed out, transit through Comcast network

---

## THREAT INTELLIGENCE

Current Threat Status: CLEAN

Behavioral Analysis:

• No honeypot hits
• No enumeration strikes
• No WAF violations
• Total incidents: 0
• Auto-banned: No

---

## NETWORK SERVICES & DNS

Open Ports: None detected

TLS Certificate: None

HTTP Title: None

Forward DNS Resolution: Not confirmed

PTR Hostnames: None

Hosted Domains: 0

Email Reputation:

• Has SPF: No
• Has DMARC: No
• TXT Record Count: 0

---

## SIGNAL OBSERVATION HISTORY

Total Observations: 7 signals recorded

Recent Activity:

• 2026-07-17 23:50:21 — Geolocation signal (US, 70% confidence)
• 2026-07-17 23:49:39 — Operator score (minimal, 30% confidence)
• 2026-07-17 23:49:35 — Ownership signal (Dot Holding, Inc., 95% confidence)
• 2026-07-17 23:49:35 — Network registration signal (104.171.16.0/20, ARIN)

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 0
• Persistently malicious: No

---

## NETWORK NEIGHBORHOOD ANALYSIS (104.171.28.0/24)

Subnet Risk Profile:

• Total Siblings: 32
• Abuse Density: 0
• Subnet Classification: Low/Medium mix

Risk Distribution:

• High Risk (60-100): 0 IPs
• Medium Risk (25-59): 6 IPs
• Low Risk (0-24): 17 IPs

Elevated-Risk Neighbors:

• 104.171.28.127 — Risk Score: 65
• 104.171.28.114, 104.171.28.151 — Risk Score: 25
• Multiple IPs with Risk Score: 40

---

## RELATIONSHIP GRAPH

Identified Relationships: 1

• Same Network: DOT-NETWORK (network-level relationship)

---

## SECURITY RECOMMENDATIONS

Current Risk Level: LOW

Recommended Actions: No immediate action required based on current risk profile.

Firewall Rules: None recommended

Contextual Notes:

• The IP shows no active malicious indicators
• No open services detected (firewalled/no services)
• Neighborhood contains some elevated-risk siblings, but target IP remains clean
• Standard monitoring and logging recommended as best practice

---

## INTELLIGENCE CONCLUSION

IP 104.171.28.29 presents a LOW RISK profile with no observable malicious behavior. The address is assigned to Dot Holding, Inc. infrastructure and appears to be firewalling or administrative infrastructure with no exposed services. While the /24 subnet contains 6 medium-risk neighbors, the target IP itself maintains a risk score of 0 with zero blacklist associations. Standard defensive monitoring is recommended; no immediate blocking or alerting actions are warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.