104.244.79.113📋 Copy

IP Intelligence Briefing: 104.244.79.113

Date: 2026-06-16

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Provider: BuyVM (AS 53667)
• Geolocation: Switzerland (Luxembourg), Latitude 47.14, Longitude 8.16
• Network Role: Colocation Hosting (non-cloud, non-CDN)
• Ownership: Registered to BuyVM (ARIN), CIDR 104.244.72.0/21
• Threat Indicators: No malicious activity detected; no blacklists, campaigns, or DNS anomalies.

---

**2. Observation History (Last 30 Days)**

• Risk Trends: Minimal fluctuations; consistently low risk (operator score: 0.13).
• Abuse Density: Subnet (104.244.79.0/24) has 0.6 abuse density, classified as "mostly_clean."
• Stability: Stable ownership (no recent changes) and no persistent malicious behavior.

---

**3. Network Relationships**

• Linked Entities:

- Same network: BUYVM-LUXEMBOURG-01 (AS 53667)

• Services: No open ports, TLS certificates, or HTTP services detected.
• DNS: No PTR records, SPF/DKIM/DMArc configurations, or domain associations.

---

**4. Neighborhood Analysis**

• Subnet: 104.244.79.0/24
• Neighbor Risk:

- 4 IPs in subnet (104.244.79.40, 104.244.79.44, 104.244.79.50, 104.244.79.61)

- 3 medium-risk neighbors (scores: 59–70), 1 low-risk neighbor.

• Abuse Density: 60% of subnet IPs show potential abuse risk.

---

**5. Recommendations**

• Monitor Subnet: Investigate medium-risk neighbors for anomalous activity.
• Verify Hosting Use: Confirm legitimate hosting operations via BuyVM.
• Baseline Behavior: No immediate action required for 104.244.79.113, but track subnet changes.

Conclusion: This IP is a low-risk colocation server owned by BuyVM, with no direct malicious indicators. However, the surrounding subnet contains medium-risk IPs, warranting further scrutiny.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.