104.37.185.36📋 Copy

# IP Intelligence Briefing: 104.37.185.36

## Executive Summary

IP address 104.37.185.36/32 is associated with Premier Web Group LLC (ASN 19318) and classified as Low Risk with a risk score of 25. The IP resolves to a firewalled infrastructure endpoint with no active services or open ports. Threat indicators are absent, and the neighborhood exhibits minimal abuse density.

## Ownership and Registration

• Organization: Premier Web Group LLC
• ASN: 19318
• CIDR Block: 104.37.185.0/26
• RIR: ARIN
• Abuse Contact: Available via RDAP

## Geolocation Data

The IP is geolocated to New York, NJ, US with coordinates (40.06°N, -74.41°W). Multiple geolocation sources indicate United States origin, though some measurements show varying coordinate precision. Timezone: America/New_York.

## Network Classification

• Infrastructure Type: Firewalled / No Services
• Cloud/CDN: Not detected
• Tor/VPN/Proxy: Negative
• Hosting: Not detected
• Mobile/Residential: Negative
• Anycast: Negative

## DNS Resolution

• PTR Hostname: 36su475.worth.eu.com
• Forward Resolution: 36su475.worth.eu.com (forwardConfirmed: false)
• Domain: eu.com
• Email Authentication: SPF record present; DMARC absent
• CAA Records: None detected

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 direct blacklists; 1 DNSBL listing in control plane
• Known Campaigns: None identified
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## Services and Ports

No open ports detected. No TLS certificates, HTTP banners, or server signatures observed. The endpoint appears to be actively firewalled.

## Control Plane Analysis

• Origin ASN: 19318
• BGP Prefix: 104.37.184.0/21
• RPKI State: Not evaluated
• Route Stability: Not stable
• Route Changes (30d): 0
• DNSSEC: Valid
• DNSBL Listings: 1 out of 8 total lists

## Neighborhood Analysis (/24 Subnet: 104.37.185.0/24)

• Total Siblings: 4
• Abuse Density: 0
• Risk Distribution: 4 Low Risk, 0 Medium, 0 High
• Sibling IPs:

- 104.37.185.2: Risk 0, Authority 50

- 104.37.185.25: Risk 25, Authority 50

- 104.37.185.38: Risk 25, Authority 50

- 104.37.185.43: Risk 25, Authority 70

## Relationship Graph

Six relationships identified:

• Three "Same Network" links to PWG16
• Three "DNS Association" links to hostname 36su475.worth.eu.com

## Observation History

17 signal observations recorded as of July 17, 2026. Recent signals include:

• Subnet classification: Clean
• Inherited risk: 0
• Active siblings: 1
• Threat siblings: 0
• Geolocation signals from MaxMind and Cymru
• DNS resolution signals for eu.com

## Behavioral Indicators

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Threat Persistence: 0 days

## Recommended Security Actions

No specific firewall rules or action recommendations generated due to low risk profile. Standard monitoring and logging recommended.

## Intelligence Assessment

IP 104.37.185.36 represents firewalled infrastructure within a low-abuse-density subnet. The absence of open services, combined with zero threat indicators and minimal neighborhood risk, supports classification as a benign infrastructure endpoint. No immediate defensive action required beyond routine traffic monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.