128.199.216.104📋 Copy

IP Intelligence Briefing: 128.199.216.104

Date: 2026-06-14

---

**1. Core Profile**

• Risk Assessment:

- Overall Risk Score: 25 (Low Risk)

- Provider Score: 0 (DigitalOcean, cloud infrastructure)

- Threat Indicators: None detected (no malware, phishing, or C2 activity).

- Geolocation: Singapore (SG), ASN 14061, owned by DigitalOcean.

- Network Role: Cloud-hosted web server (nginx/1.14.0), SSH accessible.

---

**2. Threat & Vulnerability Context**

• Malicious Activity:

- No abuse confidence, Tor exit, or spam indicators.

- SSL certificate valid (Let’s Encrypt, subject: *qualitypackenterprising.lk*).

• Services:

- HTTP/HTTPS (ports 80/443), SSH (port 22).

- Server banner: `nginx/1.14.0 (Ubuntu)`.

• TLS Security:

- No HSTS, CSP, or HTTP/2 enabled.

---

**3. Observation History**

• Stability:

- No significant changes in geolocation, DNS, or threat signals over the past 30 days.

- Single observation event (June 5, 2026) with consistent HTTP response (200 OK).

• Anomalies:

- No sudden spikes in risk or network activity.

---

**4. Network Relationships**

• Subnet: 128.199.216.104/24 (DigitalOcean infrastructure).
• Neighbors:

- No active neighboring IPs in the subnet (0 siblings).

- Subnet abuse density: 0% (clean).

• Provider Context:

- Part of DigitalOcean’s cloud network (ASN 14061).

---

**5. Recommendations**

• Monitoring:

- Track DNS and TLS certificate validity, as the certificate is tied to a domain (*qualitypackenterprising.lk*).

- Monitor for unexpected SSH access or service changes.

• Mitigation:

- No immediate action required due to low risk.

- Ensure firewall rules restrict access to necessary ports (e.g., allow SSH only from trusted ranges).

---

Conclusion: 128.199.216.104 is a low-risk, cloud-hosted web server with no malicious activity detected. No urgent action is required, but ongoing monitoring is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.