146.190.77.254📋 Copy

## IP Intelligence Briefing: 146.190.77.254/32

Executive Summary

IP address 146.190.77.254 operates as a DigitalOcean cloud computing instance with moderate risk classification (score: 50). The infrastructure shows minimal operator activity and no active threat indicators, but maintains a persistent cloud hosting presence with standard web and SSH services exposed.

Infrastructure Profile

• Organization: DigitalOcean, LLC (ASN 14061, DO-13 network block)
• Network: 146.190.0.0/16 (146.190.77.254/24 subnet)
• Geolocation: North Bergen, New Jersey, US
• Classification: CloudCompute infrastructure, multi-service host
• Risk Score: 50/100 (Moderate Risk)

Service Exposure

The IP exposes two active services:

• Port 80/tcp: HTTP service (returns 301 redirect status)
• Port 22/tcp: SSH service (OpenSSH_8.9p1 Ubuntu-3ubuntu0.15)
• No TLS certificates detected on the HTTP endpoint
• No email authentication configured (SPF/DMARC absent)

Threat Assessment

• Threat Indicators: None detected
• Abuse Confidence: Not applicable
• Blacklist Status: Listed on 2 of 8 DNSBL feeds
• Campaign Correlation: No known campaigns or correlated IPs
• Tor/Proxy: Not a Tor exit node, proxy, or CDN

Temporal Analysis

Observation history shows 16 data points collected between 2026-07-31 and 2026-08-06. Signals include DNSSEC validation, service scanning, and geolocation probes. The IP demonstrates persistent cloud hosting behavior with no ownership changes observed.

Control Plane Indicators

• Operator Score: 0.1304 (Minimal)
• Route Stability: False (route changes detected)
• DNSSEC: Valid
• Delegation Age: Not available

Neighborhood Context

The /24 subnet (146.190.77.0/24) shows zero abuse density with no neighboring IPs flagged for threat activity. The IP operates in isolation within its subnet.

Recommended Actions

Based on the moderate risk profile, consider implementing the following controls:

Firewall Rules:

• `iptables -A INPUT -s 146.190.77.254 -j DROP`
• `nft add rule inet filter input ip saddr 146.190.77.254 drop`

WAF/Cloud Rules:

• Cloudflare WAF: Block 146.190.77.254 (risk score 50)
• AWS WAF: Add 146.190.77.254/32 to block list
• pfSense: Block 146.190.77.254/32

Intelligence Note

This IP represents legitimate cloud infrastructure with standard hosting services. The moderate risk rating stems from DNSBL listings and route instability rather than active malicious behavior. Blocking is recommended as a precautionary measure, but investigation should focus on traffic patterns rather than the IP's inherent reputation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.