104.248.194.104
INTELLIGENCE BRIEFING: 104.248.194.104/32
Classification: Low Risk / Cloud Infrastructure
Date Generated: 2026-08-13
---
## Executive Summary
Target IP 104.248.194.104 is a DigitalOcean cloud compute instance located in Amsterdam, NL (ASN 14061). The asset presents a low-risk profile (Risk Score: 25) with no active threat indicators. The IP is part of a clean subnet (104.248.194.0/24) with zero abuse density and only one sibling IP observed.
## Ownership & Infrastructure
- Organization: DigitalOcean, LLC
- Network: DIGITALOCEAN-104-248-0-0
- CIDR Block: 104.248.0.0/16
- Infrastructure Type: CloudCompute
- Geolocation: Amsterdam, North Holland, Netherlands
## Network Services
- Open Port: TCP/22 (SSH) - Banner: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16
- Reverse DNS: None configured
- Email Authentication: No SPF or DMARC records detected
## Threat Assessment
- Abuse Confidence: Not scored
- Threat Indicators: None detected
- Blacklist Status: 0 blacklist entries
- Known Campaigns: None associated
- Tor/Proxy/VPN: Negative flags across all categories
## Historical Signals
Analysis of 17 observations indicates stable BGP routing to 104.248.192.0/20 via ASN 14061. Historical subnet classification shows "clean" status with inherited risk of 0. Operator score remains minimal (0.1304) throughout the observation period. No malicious activity detected in temporal data.
## Neighborhood Analysis
The /24 subnet (104.248.194.0/24) contains 2 sibling IPs:
- 104.248.194.104 (Risk: 25)
- 104.248.194.181 (Risk: 25, Authority: 50)
Both IPs show low risk profiles with no threat siblings identified.
## Recommended Actions
No specific firewall rules or blocking actions recommended. The IP presents normal cloud infrastructure behavior for a DigitalOcean compute instance with SSH service enabled.
## Analyst Notes
This IP is legitimate cloud infrastructure. If this IP appears in security event logs, verify context before taking action. The SSH service on port 22 is expected for cloud compute instances. No immediate threat intelligence flags warrant blocking or investigation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-104-248-0-0 |
| CIDR Block | 104.248.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-06 00:35:13 UTC |
| Last Seen | 2026-08-13 08:23:07 UTC |
| Profile Built | 2026-08-13 08:36:51 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.