143.110.190.22📋 Copy

# IP INTELLIGENCE BRIEFING: 143.110.190.22

## Executive Summary

IP address 143.110.190.22 presents as a low-risk cloud infrastructure endpoint operating within DigitalOcean's Bengaluru, India region. The IP exhibited a risk score of 25, with no active threat indicators, known campaigns, or malicious reputation. Infrastructure classification indicates legitimate cloud computing usage with standard web services.

## Technical Profile

Ownership and Classification:

• ASN: 14061 (DigitalOcean, LLC)
• Registry: ARIN
• Infrastructure Type: Cloud Compute / Web Server
• Network Classification: Cloud Hosting

Geolocation:

• Country: India (IN)
• Region: Karnataka (KA)
• City: Bengaluru
• Accuracy Radius: 2250 km

Network Services:

• Port 80/TCP: HTTP (nginx/1.18.0)
• Port 443/TCP: HTTPS
• Port 22/TCP: SSH (OpenSSH_8.9p1 Ubuntu-3ubuntu0.15)
• TLS Certificate: Let's Encrypt (CN=admin.is.dataxchange.in)
• HTTP Status: 502 (Bad Gateway)

DNS Configuration:

• Forward Resolution: 0 hostnames
• Email Authentication: SPF and DMARC not configured
• DNSSEC: Valid
• DNSBL Listed: 1 of 8 lists

## Threat Intelligence

Risk Assessment:

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Campaign Indicators:

• Campaign Likelihood: None
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

Control Plane Data:

• Route Origin ASN: 14061
• BGP Prefix: 143.110.176.0/20
• AS Path: 57866 6453 4755 14061
• Route Stability: Stable
• RPKI State: Not evaluated
• Operator Score: 0.2609 (Basic)

## Network Context

Subnet Analysis (143.110.190.22/24):

• Subnet Classification: Mostly Clean
• Abuse Density: 1 (low)
• Inherited Risk: 2
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0

The /24 subnet exhibits minimal abuse activity with a single threat sibling IP present. No high or medium-risk neighbors were identified.

Relationship Graph:

• 20 relationships identified
• Primary relationship type: Same Network (DigitalOcean-143-110-128-0)
• No external organization or hostname correlations detected

## Historical Analysis

Observation Timeline:

• Total Observations: 25
• Data Span: Multiple observation windows
• Threat Persistence Days: 0
• Ownership Changes: 0

Key Historical Signals:

• 2026-06-20: ASN 14061 assignment confirmed (allocated 2012-09-25)
• 2026-06-20: BGP routing data observed with origin ASN 14061
• 2026-06-20: Geographic validation attempted (ICMP blocked, unable to validate)
• 2026-06-28: Cloud infrastructure classification confirmed

Temporal Trends:

• No persistent malicious behavior observed
• No ownership transitions detected
• Risk profile remains stable over observation period

## Security Recommendations

Immediate Actions:

• No specific firewall rules or blocking actions recommended
• Risk score (25) falls below typical threshold for automated blocking
• Standard cloud service monitoring applies

Monitoring Considerations:

• Monitor for changes in risk score above threshold
• Watch for certificate expiration (Let's Encrypt issued)
• Track subnet 143.110.190.0/24 for emerging threat indicators
• Review DNSBL listing status periodically

Infrastructure Notes:

• SSL/TLS certificate issued by Let's Encrypt for admin.is.dataxchange.in
• Server fingerprint: nginx/1.18.0 on Ubuntu
• SSH service accessible on port 22
• HTTP 502 responses may indicate application-level issues rather than security concerns

Conclusion:

The IP address 143.110.190.22 represents standard cloud infrastructure with minimal threat indicators. No immediate blocking or defensive actions are warranted based on current intelligence. Continue standard monitoring practices for cloud-hosted endpoints.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.