104.253.130.122📋 Copy

IP INTELLIGENCE BRIEFING

Target: 104.253.130.122/32

Classification: LOW RISK

Date: 2026-07-30

---

Executive Summary

IP 104.253.130.122 is classified as low risk with a risk score of 25. The address belongs to Subnet Digital LLC (ASN 9009) and operates within a clean subnet environment. No active threat indicators, malware campaigns, or abuse patterns were detected during the assessment period.

---

Ownership & Infrastructure

• Organization: Subnet Digital LLC
• ASN: 9009
• Network: EGN-21
• CIDR Block: 104.252.0.0/15
• Registration RIR: ARIN
• Abuse Contact: abuse@egihosting.com

Network Role: The IP is configured as "Firewalled / No Services" with no open ports detected. It does not function as a CDN, VPN, proxy, hosting service, or mobile carrier endpoint.

---

Threat Assessment

Current Risk Indicators: None

• Blacklist Status: 0 blacklist entries
• DNSBL Listed: 1 of 8 total lists (minor concern)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: No active matches

Abuse Confidence: Not applicable (no active abuse signals)

---

Neighborhood Analysis

Subnet 104.253.130.0/24 demonstrates clean operational characteristics:

• Abuse Density: 0%
• Subnet Classification: Clean
• Total Siblings: 3
• Active Threat Siblings: 0
• Risk Distribution: 2 low-risk, 0 medium/high-risk

Notable Neighbors:

• 104.253.130.76 (Risk Score: 0, Authority Score: 50)
• 104.253.130.107 (Risk Score: 0, Authority Score: 50)

---

DNS & Email Reputation

• PTR Hostnames: None
• Forward Resolution: Unconfirmed
• Hosted Domains: 0
• Email Authentication: SPF, DMARC, and TXT records not configured
• Forward Resolution Count: 0

---

Observation History

Signal observation count: 13 observations recorded. Recent activity confirms:

• Geolocation: US (multiple sources: Cymru, MaxMind GeoLite2)
• Ownership: Consistent attribution to Subnet Digital LLC
• Threat Persistence: 0 days (no persistent malicious activity)
• Stability: No ownership changes detected

---

Control Plane Data

• BGP Prefix: 104.253.130.0/24
• Route Stability: Unstable
• DNSSEC Validation: Valid
• RPKI State: Not assessed
• IRR Consistency: Not assessed
• Delegation Age: Not available

---

Recommended Actions

No immediate firewall rules or mitigation actions recommended. The IP presents minimal risk to defensive operations. Standard monitoring procedures are adequate.

SOC Guidance: No action required. The IP address exhibits normal operational characteristics consistent with a legitimate, low-activity endpoint in the Subnet Digital infrastructure.

---

Intelligence Product: IPDebrief

Confidence Level: High

Data Freshness: Current (2026-07-30)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.