146.190.252.200📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target IP: 146.190.252.200

Analysis Date: Current

Risk Classification: Low Risk (Score: 25/100)

---

## EXECUTIVE SUMMARY

This IP address resolves to a DigitalOcean cloud infrastructure instance in Toronto, Ontario, Canada. The address is registered under CloudwaysApps domain infrastructure and presents a low-risk profile with no active threat indicators. The IP operates as a web server on cloud hosting infrastructure with standard HTTP/HTTPS services exposed.

---

## NETWORK OWNERSHIP & GEOLOCATION

Provider: DigitalOcean, LLC (ASN 14061)

Location: Toronto, Ontario, Canada (CA)

Geolocation Accuracy: 4,500 km radius (consensus: plausible)

Infrastructure Type: Cloud Compute

CIDR Block: 146.190.240.0/20 (controlled by DigitalOcean)

RPKI State: Valid

Operator Score: 0.1304 (Minimal)

---

## DNS RESOLUTION & HOSTNAMES

Primary Hostname: 1628058.cloudwaysapps.com

Domain Authority: cloudwaysapps.com

Forward Resolution Confirmed: Yes

Email Authentication: SPF/DMARC not configured (typical for cloud instances)

Forward Resolution Count: 1

---

## EXPOSED SERVICES

Web Server: nginx

TLS Certificate: Sectigo Public Server Authentication CA (CN=*.cloudwaysapps.com)

Certificate Issuer: Sectigo Limited, GB

Certificate Status: Valid (not self-signed)

---

## THREAT INDICATORS

Overall Threat Status: Clean

Blacklist Count: 0

Known Campaigns: None detected

Tor Exit Node: False

Known Attacker: False

Spam Source: False

DNSBL Listings: 1 of 8 (minimal impact)

Control Plane Data:

• Route Stability: False
• MOAS Status: False
• Route Changes (30d): 0
• IRR Consistency: Unknown

---

## OBSERVATION HISTORY (22 TOTAL SIGNALS)

Temporal Analysis:

• Observations span from June 2026
• Cloud infrastructure classification consistent across all signals
• HTTP responses show 403 status codes (access control measures)
• No persistent malicious activity detected

Key Historical Signals:

• Cloud infrastructure consistently classified across all probes
• Geographic validation blocked (ICMP violation)
• Neighborhood abuse density: 0.5 (moderate)
• Classification: mostly_clean

---

## NETWORK NEIGHBORHOOD ANALYSIS

Subnet: 146.190.252.200/24

Total Siblings: 2

Active Siblings: 1

Threat Siblings: 1

Abuse Density: 0.5 (moderate)

Inherited Risk: 2/100

Neighbor IP Profile:

• 146.190.252.159 (Risk Score: 25, Authority Score: 50)

---

## RELATIONSHIP GRAPH

Total Relationships: 45

Primary Relationship Types:

• Same Network: DO-13 (40+ instances)
• Additional relationships include network associations and infrastructure links

---

## RECOMMENDATIONS

Firewall/Security Actions:

• No blocking required at this time
• Low-risk profile supports continued monitoring
• Consider monitoring for any change in threat indicators

SOC Analyst Notes:

• IP represents legitimate cloud infrastructure usage
• No evidence of malicious activity or compromise
• Neighbor IP (146.190.252.159) shares similar risk profile
• Continued monitoring recommended if this IP appears in threat intelligence feeds

Risk Assessment: LOW RISK — No immediate threat action required. IP is part of standard cloud hosting infrastructure with no active indicators of compromise.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.