It connects to services that are already published, records what they announce, and does nothing else. If you found 172.104.235.95 in your logs, this page is why.
It never submits or guesses credentials, never exploits a vulnerability, and never sends flood or stress traffic.
Write to abuse@sovereignasm.com with the address or range. It is applied on receipt — you are not asked to prove ownership first — and answered within one business day.
sentinel2.sovereignasm.com · 172.104.235.95