145.223.130.99📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 145.223.130.99/32 | Classification: Low Risk

---

## Executive Summary

IP address 145.223.130.99 presents as a low-risk single-service host associated with IRT-BYTEPLUS-SG in Singapore. The IP carries a risk score of 25, shows no active threat indicators, and is not classified as a known attacker or spam source. Neighborhood analysis indicates minimal abuse density within the /24 subnet. No immediate blocking or monitoring actions are recommended.

---

## Ownership & Infrastructure

• Organization: IRT-BYTEPLUS-SG
• ASN: 150436 (BYTEPLUS-SG)
• Network Block: 145.223.128.0/19
• Location: Singapore, SG (1.35°N, 103.82°E)
• RIR: RIPE
• Service Classification: Single-Service Host

---

## Threat Assessment

• Risk Score: 25 / 100
• Reputation: Low Risk
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists

---

## Network Behavior

• Open Ports: 8080/TCP (HTTP-alt)
• DNS Resolution: Forward confirmed: No
• PTR Records: None
• Email Authentication: No SPF/DMARC records
• Route Stability: Unstable (isRouteStable: false)
• RTT (US): ~253ms average

---

## Subnet Analysis (145.223.130.0/24)

• Total Siblings: 14 IPs
• Abuse Density: 0
• Subnet Classification: Clean
• Risk Distribution: High: 0, Medium: 11, Low: 2
• Threat Siblings: 0

Notable neighbors include:

• 145.223.130.21 (Risk: 40)
• 145.223.130.90 (Risk: 40)
• 145.223.130.114 (Risk: 40)

---

## Historical Signals

Analysis of 19 observations indicates stable behavior with no ownership changes and zero threat persistence days. Recent observations (2026-07-28) confirm consistent Singapore geolocation and clean subnet classification. No escalating threat patterns detected.

---

## Intelligence Notes

• The IP shows minimal threat indicators and is not associated with any known campaigns
• Single-service host designation suggests limited attack surface
• Control plane data indicates routing instability; monitor for BGP changes
• Subnet abuse density remains negligible despite 11 medium-risk neighbors

---

## Recommended Actions

No immediate firewall rules or blocking recommended. The IP presents minimal threat and lacks active malicious indicators. SOC teams should monitor for any changes in threat indicators, particularly given the route instability flag.

---

*Report generated based on IPDebrief intelligence data. Classification: Internal Use.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.