204.48.24.58
INTELLIGENCE BRIEFING: IP 204.48.24.58/32
Classification: Moderate Risk | Category: Cloud Infrastructure
---
**Profile Summary**
IP 204.48.24.58 is a DigitalOcean cloud compute host (ASN 14061) assigned to the DIGITALOCEAN-204-48-16-0 network block. The IP carries a risk score of 40 (Moderate Risk) with 2 DNSBL listings detected out of 8 total lists. Geolocation data indicates New Jersey, US, though RTT validation flags a discrepancy: observed latency of 20ms against a minimum possible 119.3ms for the claimed distance, suggesting geolocation accuracy limitations.
**Infrastructure Assessment**
- Infrastructure Type: CloudCompute (DigitalOcean)
- Connection Type: Single-Service Host
- Open Ports: TCP/22 (SSH) - SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16
- TLS/HTTP Services: None detected
- DNS Records: No PTR hostnames; forward resolution failed
**Threat Indicators**
Current threat assessment shows no active malicious indicators:
- Known attacker: No
- Tor exit node: No
- Spam source: No
- Campaign matches: None
- Known campaigns: None
- Threat observation count: 0
The IP is not flagged as a known spam source or attacker in threat feeds.
**Network Context**
The immediate /24 subnet (204.48.24.0/24) shows an abuse density of 0 with a "clean" classification. One sibling IP (204.48.24.130) was observed with a risk score of 25, indicating low-risk activity in the neighborhood. No threat siblings detected.
All relationship entities link to the same DigitalOcean network (DIGITALOCEAN-204-48-16-0), confirming infrastructure consolidation.
**Historical Observations**
Analysis of 17 historical observations indicates stable network behavior with no escalation patterns. Recent subnet classifications maintain "clean" status. Threat persistence days recorded at 0, and ownership changes: 0.
**Recommended Actions**
Given the moderate risk classification and lack of direct threat indicators, the following posture is recommended:
- Monitor inbound SSH (port 22) activity for brute force or unauthorized access attempts
- No immediate block recommendation; maintain logging and monitoring
- Review DNSBL listings if outbound connections from this IP are observed
---
Status: No immediate threat action required. Continue standard cloud infrastructure monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-204-48-16-0 |
| CIDR Block | 204.48.16.0/20 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-02 04:45:32 UTC |
| Last Seen | 2026-08-13 03:29:58 UTC |
| Profile Built | 2026-08-13 03:46:09 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.