104.236.91.115📋 Copy

# IP Intelligence Briefing: 104.236.91.115/32

Classification: Low Risk / Cloud Infrastructure

Date: Current Assessment

Risk Score: 25/100

---

## Executive Summary

IP 104.236.91.115 is identified as a DigitalOcean cloud compute instance hosted in New York, US. The asset presents a low risk profile with no active threat indicators. No actionable security recommendations are warranted at this time.

---

## Infrastructure Profile

Ownership & Provider:

• Organization: DigitalOcean, LLC
• ASN: 14061
• BGP Prefix: 104.236.64.0/18
• Infrastructure Type: Cloud Compute
• Hosting Classification: Yes
• Contact: abuse@digitalocean.com

Geolocation:

• Country: United States (US)
• Region: US-NY (New York)
• Coordinates: Latitude/longitude unavailable
• Timezone: America/New_York
• GPS Validation: Inconsistent (geoPlausible: false)

Network Services:

• Open Ports: None detected
• TLS Certificate: Not configured
• HTTP Services: Not detected
• Service Purpose: Firewalled / No Services

---

## Threat Assessment

Current Risk Indicators:

• Reputation: Low Risk
• Abuse Confidence Score: Not elevated
• Threat Indicators: None detected
• Known Attacks: False
• Spam Source: False
• Tor Exit Node: False

Blacklist Status:

• DNSBL Listings: 1 of 8 total lists
• Threat Feeds: None
• Known Campaigns: None

Behavioral Signals:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0

---

## Observation History

Signal Count: 14 observations recorded

Timeframe: June 2026

Key Observations:

• Organizational registration signals consistently identify DigitalOcean, LLC
• RIR registration (ARIN) confirmed across multiple observations
• Operator score: 0.1304 (Minimal)
• No significant changes in threat posture observed
• Ownership stability: No ownership changes recorded

Temporal Analysis:

• Threat Persistence Days: 0
• Observation Count: 0 (persistent malicious activity)
• Is Persistently Malicious: False

---

## Neighborhood Analysis

Subnet: 104.236.91.0/24

• Neighbor Count: 0
• Abuse Density: 0
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0

Inherited Risk: None (no sibling threat correlation)

---

## Relationship Graph

Connected Entities: None detected

• Subnet Links: None
• Hostname Links: None
• Organization Links: None
• Certificate Links: None

---

## Recommended Actions

Current Status: No specific firewall rules or security actions recommended.

Rationale:

• Risk score (25) falls within acceptable operational thresholds
• No active threat indicators present
• Infrastructure is properly classified as cloud compute with no exposed services
• Historical data shows consistent, benign operational patterns

Suggested Monitoring:

• Continue standard traffic monitoring
• No immediate blocking or allowlisting required
• Review DNSBL listing status if security policies are strict

---

## Intelligence Assessment

IP 104.236.91.115 represents standard cloud infrastructure with no evidence of malicious activity. The absence of threat indicators, combined with the cloud hosting classification and lack of active services, indicates this IP serves benign infrastructure purposes. The single DNSBL listing appears to be a false positive or standard compliance marker rather than active abuse.

Recommended Handling: Allow traffic with standard logging. No special treatment required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.