143.198.75.153📋 Copy

# IP Intelligence Briefing: 143.198.75.153/32

Classification: Cloud Infrastructure Host

Risk Level: Low (Score: 25/100)

Date: Current Analysis

## Executive Summary

IP 143.198.75.153 is a DigitalOcean cloud host operating with minimal risk indicators. The IP shows no active threat associations, no blacklist entries, and maintains standard cloud infrastructure characteristics. Geographic validation anomalies noted but do not indicate malicious activity.

## Network Profile

• Organization: DigitalOcean, LLC (ASN 14061)
• Geolocation: Santa Clara, CA, US (reported)
• Network Type: Cloud infrastructure / Single-service host
• CIDR Block: 143.198.64.0/20 (origin)
• Risk Score: 25 (Low Risk)

## Threat Indicators

• Abuse Confidence: Not reported
• Blacklist Status: 0 entries
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None

## Technical Observations

• Open Ports: TCP/22 (SSH-2.0-OpenSSH_9.6)
• Web Server: nginx/1.24.0
• Email Authentication: SPF and DMARC configured
• HTTP Fingerprint: Next.js application detected
• DNS Resolution: No reverse DNS records

## Neighborhood Assessment (143.198.75.0/24)

• Abuse Density: 1 (minimal)
• Classification: Mostly clean
• Threat Siblings: 1 in subnet
• Subnet Risk: 2/100 (low)

## Historical Activity

• Observation Count: 21 signals
• Persistence: No persistent malicious behavior detected
• Recent Classification: Subnet marked as "mostly_clean" (June 2026)
• Ownership Stability: No ownership changes recorded

## Geolocation Validation

Anomaly Detected: RTT measurements indicate implausible geolocation:

• Claimed Location: Santa Clara, CA
• Observed RTT: 87ms
• Minimum Possible RTT for distance: 177.2ms
• Assessment: Geographic data inconsistent; distance of ~8,858km from probe origin exceeds feasible RTT

## Related Infrastructure

• Network Relationships: All 25 relationships mapped to DigitalOcean network blocks (143.198.0.0/16 range)
• No connections to external malicious entities or campaign infrastructure

## Recommended Actions

Immediate: No blocking required. Low risk score with no active threat indicators.

Monitoring: Standard cloud host monitoring applies. Geographic validation anomaly may warrant additional observation for future changes.

Firewall Rules: None required. Standard outbound rules apply.

---

Analyst Note: This IP represents typical cloud infrastructure with minimal security concerns. The geographic validation anomaly is likely a measurement artifact rather than evidence of spoofing or malicious activity. Continue standard monitoring protocols.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.