146.190.170.29📋 Copy

# THREAT INTELLIGENCE BRIEFING: 146.190.170.29

## Executive Summary

IP address 146.190.170.29 presents a moderate risk profile (risk score: 40) within DigitalOcean cloud infrastructure. The IP shows no active threat indicators but is listed on 8 DNSBLs with 2 confirmed listings. Current service enumeration indicates a firewalled state with no open ports, suggesting the IP is not actively providing services. The associated /24 subnet maintains a clean classification with zero abuse density.

## Technical Profile

• IP Address: 146.190.170.29/32
• Organization: DigitalOcean, LLC (ASN: 14061)
• Network Block: 146.190.0.0/16 (DO-13)
• Geolocation: Santa Clara, California, US (37.39°N, -121.96°W)
• Infrastructure Type: Cloud Compute
• Classification: Cloud Hosting (Firewalled / No Services)
• DNS Status: No PTR records, no forward resolution, no email authentication (SPF/DMARC)

## Threat Assessment

• Risk Score: 40 (Moderate Risk)
• Threat Indicators: None detected
• Blacklist Status: 8 DNSBL listings (2 confirmed)
• Campaign Correlation: No associated campaigns detected
• Malicious Activity: Not flagged as known attacker, spam source, or Tor exit node
• Service Exposure: No open ports detected; TLS certificates unavailable

## Historical Observations

Analysis of 14 signal observations reveals:

• Recent ownership attribution to DigitalOcean, LLC (stable)
• No persistent malicious activity patterns
• Geolocation validation shows claimed coordinates: 37.39°N, -98.58°W (US)
• Subnet classification remains clean (abuse density: 0)
• ICMP validation: Blocked (unable to validate)
• Average signal confidence: 0.35–0.90

## Neighborhood Analysis

Subnet 146.190.170.0/24 assessment:

• Abuse Density: 0
• Classification: Clean
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor IP: 146.190.170.66 (risk score: 25, authority score: 50)

Risk distribution across the /24 subnet: 1 low-risk IP, 0 medium-risk IPs, 0 high-risk IPs.

## Recommended Security Actions

Based on the moderate risk profile (40), the following firewall rules are recommended:

## Analyst Notes

While the IP carries a moderate risk score due to DNSBL listings, the lack of open services, absence of threat indicators, and clean subnet classification suggest this is not an active threat actor. The risk score likely reflects historical reputation rather than current malicious behavior. SOC analysts should correlate with additional signals before implementing blocking measures, as this is a legitimate cloud provider IP with no active exploitation indicators.

---

*Report generated using IPDebrief Intelligence Platform*

*Data Timestamp: 2026-07-30*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.