134.199.152.230📋 Copy

## IP Intelligence Briefing: 134.199.152.230/32

Classification: Low Risk | Timestamp: 2026-06-18

Executive Summary

IP address 134.199.152.230 is a DigitalOcean cloud compute instance located in Sydney, Australia (AS14061). The IP presents a low-risk profile with a reputation score of 25. No active threat indicators, blacklist entries, or open services were observed. The IP is part of a cloud hosting infrastructure with minimal operator activity scores.

Technical Profile

• Organization: DigitalOcean, LLC (ASN 14061)
• Geolocation: Sydney, NSW, Australia (AU)
• Infrastructure Type: CloudCompute / Hosting
• Service Status: Firewalled / No Services (no open ports)
• DNS: No PTR records, no forward resolution
• Network Role: Cloud infrastructure with no CDN, VPN, or proxy indicators

Threat Indicators

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Associations: None detected
• Threat Persistence: Not persistently malicious (threat observation count: 1)

Observational History

The IP has been observed 22 times across the monitoring period. Key observations include:

• Consistent operator score of 0.1304 (labeled "Minimal")
• Geographic signals consistently indicating AU location
• Routing stability: BGP prefix 134.199.144.0/20 (not route-stable)
• Recent observations from 2026-06-17 to 2026-06-18

Network Neighborhood

• Subnet: 134.199.152.24/24
• Abuse Density: 1 (low)
• Classification: Mostly clean
• Active Siblings: 1
• Threat Siblings: 1 (single threat indicator in neighborhood)
• Neighbor Risk Distribution: High: 0, Medium: 0, Low: 0

Control Plane Analysis

• Origin ASN: 14061 (DigitalOcean)
• BGP Prefix: 134.199.144.0/20
• Route Stability: False (changes detected)
• Route Changes (30d): 0
• RPKI State: Not validated
• DNSSEC: Valid

Recommendations for SOC Analysts

1. Traffic Handling: Monitor but no immediate blocking required. Low-risk profile.

2. Alerting: No specific alert thresholds recommended for this IP.

3. Investigation: Only warranted if this IP appears in incident logs or correlation data.

4. Firewall Rules: No specific rules required based on current risk profile.

Conclusion

This IP represents legitimate cloud infrastructure with minimal threat indicators. The single threat sibling in the neighborhood warrants awareness but does not elevate the risk profile of this specific address. Continue standard monitoring protocols.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.