146.190.69.241
INTELLIGENCE BRIEFING: IP 146.190.69.241
Executive Summary
Intellect analysts assessed IP 146.190.69.241 as a DigitalOcean cloud infrastructure asset with moderate risk (65/100) due to DNSBL listings and geographic anomalies. The IP operated as a single-service host with SSH access and was detected on three DNSBLs out of eight total listings.
Infrastructure Profile
DigitalOcean, LLC (ASN 14061) operated the IP in North Bergen, NJ, USA, within cloud compute infrastructure. The IP resolved to hostname s2.internetresearch.center and maintained SSH service on port 22 with OpenSSH 9.7p1 Ubuntu-7ubuntu4.3 banner. DNSSEC validation was enabled and RTT measurements of 21ms were recorded despite geolocation data suggesting 5,963 km distance, indicating potential geographic spoofing.
Threat Indicators
Three DNSBL listings were recorded across eight total blacklists, with maximum severity rated high in the most recent observation on 2026-06-17. The control plane showed zero route changes within 30 days but flagged as not route stable. Operator score of 0.1304 classified as minimal. No known campaigns, Tor exit node activity, or known attacker classifications were identified.
Neighborhood Analysis
The /24 subnet (146.190.69.0/24) was classified as mostly clean with abuse density of 1. Two sibling IPs were detected, with one active neighbor (146.190.69.68) showing low risk (25/100). Two threat siblings were identified within the subnet context.
Temporal Behavior
Twenty-four observations tracked over time showed persistent cloud infrastructure classification. Ownership remained stable with zero changes recorded. The IP was not persistently malicious and threat persistence days were zero.
Actionable Intelligence
The IP warrants monitoring for DNSBL activity escalation and geographic spoofing patterns. SSH access should be evaluated against organizational policies for cloud infrastructure. No immediate blocking recommended based on moderate risk classification, but continuous observation advised for subnet correlation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | s2.internetresearch.center |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | s2.internetresearch.center |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.7p1 Ubuntu-7ubuntu4.3 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 27% | 1 | 3 |
| geolocation | 31% | 2 | 3 |
| Overall | 22% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-08 17:17:37 UTC |
| Last Seen | 2026-06-27 13:32:55 UTC |
| Profile Built | 2026-06-28 07:38:32 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 30 |
Full dossier details are available via our API.