104.236.113.248📋 Copy

# IP Intelligence Briefing: 104.236.113.248/32

## Executive Summary

The IP address 104.236.113.248 is a low-risk infrastructure endpoint hosted on DigitalOcean cloud infrastructure in Clifton, New Jersey, United States. Current risk assessment scores indicate minimal threat activity with no active malicious indicators.

## Infrastructure Profile

• IP Address: 104.236.113.248/32
• Organization: DigitalOcean, LLC (ASN 14061)
• Network: DIGITALOCEAN-104-236-0-0 (104.236.0.0/16)
• Geolocation: Clifton, NJ, US (America/New_York timezone)
• Infrastructure Type: CloudCompute
• Classification: Clean infrastructure with no active services exposed

## Threat Assessment

The IP exhibits a low-risk reputation score of 25 out of 100. No active threat indicators detected:

• Blacklist Status: No current blacklist entries (0/0)
• Known Attackers: Not identified
• Spam Source: Not identified
• Tor Exit Node: Not a Tor exit node
• Known Campaigns: None associated

The control plane indicates stable routing with BGP prefix 104.236.64.0/18 originating from ASN 14061. Route stability is maintained with no significant changes in the past 30 days.

## Historical Observations

Analysis of 20 historical observations reveals:

• Network classification consistently marked as "clean"
• One blacklist listing observed across 8 total lists with high severity classification
• Operator score: 0.1304 (Minimal)
• No evidence of persistent malicious behavior or threat persistence

## Network Neighborhood

The /24 subnet (104.236.113.0/24) shows:

• Abuse Density: 0
• Subnet Classification: Clean
• Active Neighbors: 1 (104.236.113.176)
• Threat Siblings: 0
• No high or medium-risk neighbors detected

## Relationship Mapping

Relationship analysis confirms the IP is associated solely with DigitalOcean network infrastructure (DIGITALOCEAN-104-236-0-0). No hostname, certificate, or organizational relationships beyond the cloud provider network were identified.

## Network Role Analysis

• Open Ports: None detected
• Service Exposure: None (Firewalled / No Services)
• CDN: No
• Proxy/VPN: No
• Residential: No
• Hosting: Yes (Cloud hosting infrastructure)

## Recommended Actions

No immediate security actions recommended. The IP demonstrates benign infrastructure characteristics consistent with legitimate cloud hosting operations. Routine monitoring is advised as with all cloud infrastructure.

## Intelligence Assessment

This IP represents standard cloud infrastructure with no malicious indicators. The absence of open services and clean network classification suggests legitimate operational use. The single observed blacklist listing does not correlate with known threat activity and may represent false positive or historical data.

Overall Risk Level: Low

Recommended Action: Monitor / No Action Required

Confidence Level: High

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.