104.248.162.195📋 Copy

# IP Intelligence Briefing: 104.248.162.195

Classification: Low Risk Cloud Infrastructure

Report Date: Current

Risk Score: 25/100

## Executive Summary

IP address 104.248.162.195 is a DigitalOcean cloud compute endpoint with minimal threat indicators. The IP demonstrates low-risk characteristics consistent with cloud hosting infrastructure. No active malicious campaigns, known attacker status, or spam source attribution detected.

## Ownership and Network Context

• Organization: DigitalOcean, LLC (ASN 14061)
• Network Block: 104.248.0.0/16 (DIGITALOCEAN-104-248-0-0)
• Infrastructure Type: CloudCompute / Hosting
• Geolocation: Newark, New Jersey, United States (US-NJ)
• RIR: ARIN

## Threat Assessment

Current Risk Profile:

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Attacker Status: False
• Tor Exit Node: False
• Spam Source: False

Control Plane Indicators:

• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)
• Route Stability: Flagged as unstable
• RPKI State: Not available

Service Enumeration:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Connection Status: Firewalled / No Services

## Historical Observation Analysis

Observation Count: 14 signals

Latest Activity: 2026-08-06

Geolocation Consistency:

• Primary location signal: US (confidence 0.35)
• Traceroute endpoint: Newark, NJ (confidence 0.70)
• Geo consensus: True

Threat Persistence:

• Threat Persistence Days: 0
• Ownership Changes: 0
• Persistently Malicious: False
• Threat Observation Count: 0

## Neighborhood Analysis

Subnet: 104.248.162.0/24

• Abuse Density: 0
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 1 (104.248.162.60, Risk Score: 25)

## Relationship Graph

• Same Network: DIGITALOCEAN-104-248-0-0 (2 relationships)
• No associated hostnames, organizations, or certificates detected

## Recommended Actions

No specific firewall or WAF rules recommended at this time. The IP presents low-risk characteristics typical of legitimate cloud infrastructure.

SOC Analyst Guidance:

1. Monitor for service enumeration changes

2. Watch for route stability improvements

3. Track DNSBL listing status

4. Continue monitoring for neighborhood activity changes

Confidence Level: High - Data indicates standard cloud hosting behavior with no malicious indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.