104.248.255.35
# IP Intelligence Briefing: 104.248.255.35/32
## Executive Summary
Target IP 104.248.255.35 is a DigitalOcean cloud-hosted endpoint located in Frankfurt am Main, Germany. Risk score of 65 reflects moderate risk classification with no confirmed malicious activity indicators. Subnet abuse density remains at zero, indicating limited neighbor compromise.
## Host Profile
- Organization: DigitalOcean, LLC (ASN 14061)
- Network: DIGITALOCEAN-104-248-0-0 (104.248.0.0/16)
- Geolocation: Frankfurt am Main, Hesse, DE
- Infrastructure: Cloud-hosted single-service endpoint
- Services: SSH (port 22/TCP) with OpenSSH 7.6p1 Ubuntu-4ubuntu0.3
## Threat Indicators
- Risk Score: 65 (Moderate Risk)
- Blacklist Status: Listed on 3 of 8 DNSBLs
- Known Campaigns: None identified
- Tor/Proxy/VPN: Not detected
- Known Attacker: No confirmed reputation
- Spam Source: Not flagged
## Network Context
- Subnet Classification: Clean (104.248.255.0/24)
- Abuse Density: 0
- Neighbor Count: 1 active sibling (104.248.255.108, Risk Score: 25)
- Threat Siblings: 0
- Route Stability: Not stable (route changes observed in 30-day window)
## Historical Observations
Analysis of 19 historical observations reveals:
- Operator score classified as "Minimal" (0.1304)
- DNSSEC valid: Yes
- High-severity DNSBL listing detected in recent history
- No persistent malicious behavior confirmed (threat persistence days: 0)
## Recommended Actions
- Monitor outbound connections from internal endpoints to this IP
- Review firewall rules for port 22 (SSH) access from this address
- No immediate blocking required; monitor for escalation
- Subnet-level reputation remains clean—no broad blocking recommended
## Intelligence Assessment
Target presents moderate risk primarily due to cloud hosting infrastructure and limited DNSBL presence. No active attack patterns detected. Network context supports continued monitoring rather than immediate remediation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-104-248-0-0 |
| CIDR Block | 104.248.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 29% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 32% | 2 | 3 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-29 10:33:04 UTC |
| Last Seen | 2026-08-12 23:15:06 UTC |
| Profile Built | 2026-08-12 23:18:09 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.