# IP Intelligence Briefing: 104.64.208.54/32
## Executive Summary
The subject IP 104.64.208.54 is classified as Moderate Risk (50/100). The address resolves to Linode infrastructure within Akamai's cloud compute network (ASN 63949), hosted in Singapore. While the IP shows no active threat indicators, it is listed on 2 of 8 DNSBLs and exhibits routing instability. The IP demonstrates no persistent malicious behavior or campaign correlation.
## Infrastructure Classification
| Attribute | Value |
|---|---|
| **Provider** | Linode |
| **Organization** | Akamai Technologies, Inc. |
| **Netname** | AKAMAI-COMPUTE |
| **ASN** | 63949 |
| **CIDR Block** | 104.64.0.0/16 |
| **Infrastructure Type** | CloudCompute |
| **Cloud Platform** | Yes |
| **Hosting Service** | Yes |
| **Location** | Singapore (SG) |
| **DNS PTR** | 104-64-208-54.ip.linodeusercontent.com |
## Threat Assessment
- Risk Score: 50 (Moderate)
- Abuse Confidence: Not scored
- Blacklist Count: 2
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Known Campaigns: None detected
- Threat Persistence Days: 0
- Persistently Malicious: No
Threat Indicators: No active threat indicators. The IP shows no evidence of malicious activity in threat feeds or campaign correlations.
## Network Behavior
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- Route Stability: Not stable (BGP Prefix: 104.64.192.0/19)
- RPKI State: Not available
- DNSSEC Valid: Yes
- Operator Score: 0.2609 (Basic)
## Historical Signals
Fourteen observations recorded, with recent activity from 2026-07-31. Historical data shows consistent ownership attribution to Akamai Technologies with ARIN registration. Ownership changes remain stable at zero.
## Neighborhood Analysis
The /24 subnet (104.64.208.54/24) shows no neighboring IP data available. Abuse density for the subnet is 0, indicating no adjacent malicious infrastructure detected.
## Related Entities
Relationships Detected:
- DNS Association: 104-64-208-54.ip.linodeusercontent.com
- Same Network: AKAMAI-COMPUTE
## Recommended Actions
| Platform | Recommended Rule |
|---|---|
| iptables | `iptables -A INPUT -s 104.64.208.54 -j DROP` |
| nftables | `nft add rule inet filter input ip saddr 104.64.208.54 drop` |
| nginx | `deny 104.64.208.54;` |
| pfSense | `104.64.208.54/32` |
| Cloudflare WAF | Block (risk score 50) |
| AWS WAF | `Addresses: [104.64.208.54/32]` |
Analysis Notes: Recommendations are probabilistic based on risk score of 50. Given the moderate risk classification and cloud infrastructure context, blocking is recommended but should be weighed against legitimate business needs. No immediate threat indicators require urgent mitigation.
---
*Generated by IPDebrief Intelligence Analysis Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Akamai Technologies, Inc. |
| ASN | AS63949 |
| Network Name | AKAMAI-COMPUTE |
| CIDR Block | 104.64.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 104-64-208-54.ip.linodeusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 104-64-208-54.ip.linodeusercontent.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| 8080 | http-alt | tcp | β |
| Closed Ports | 25, 80, 443, 3389, 8443 (2 open / 7 scanned) | ||
| Server | fasthttp |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_10.0p2 Debian-7+deb13u4 |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 2 |
| Overall | 23% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-30 17:11:00 UTC |
| Last Seen | 2026-08-13 00:45:20 UTC |
| Profile Built | 2026-08-13 00:55:10 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 24 |
Full dossier details are available via our API.