146.190.85.221📋 Copy

# IP Intelligence Briefing: 146.190.85.221

## Executive Summary

IP address 146.190.85.221 operates as a cloud compute web server within DigitalOcean's infrastructure. Current risk assessment indicates low threat posture with no active malicious indicators. The IP demonstrates standard cloud hosting characteristics with legitimate TLS certificate configuration and established service endpoints.

## Technical Profile

• IP Address: 146.190.85.221/32
• ASN: 14061 (DigitalOcean, LLC)
• Organization: DO-13 (146.190.0.0/16)
• Geolocation: Singapore (SG)
• Infrastructure Type: Cloud Compute / Hosting
• Network Role: Web Server

## Services & Configuration

• Open Ports: 80/tcp (HTTP), 443/tcp (HTTPS), 22/tcp (SSH)
• Web Server: nginx/1.24.0 (Ubuntu)
• TLS Certificate: CN=gitea.aktechunited.com, issued by Let's Encrypt
• TLS Protocol: TLS 1.3
• DNSSEC: Valid
• Route Stability: Unstable (false)

## Threat Assessment

• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: Clean (0 blacklists)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Involvement: None detected

## Network Neighborhood Analysis

• Subnet: 146.190.85.0/24
• Abuse Density: 0 (No abuse detected)
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 0
• Total Neighbors: 0 (No siblings detected)

## Observation History

• Total Observations: 15
• Classification: Clean
• Threat Persistence: None
• Ownership Changes: 0
• Recent Geolocation: Singapore (primary), with US location observation noted in historical data (confidence 0.35)

## Relationships

• Network Associations: DO-13 (146.190.0.0/16)
• External Relationships: None detected
• Correlated IPs: 0

## Recommendations

1. Allow List Consideration: No immediate blocking required. IP demonstrates clean reputation with no threat indicators.

2. Monitor Port 22: SSH access is enabled (port 22). Recommend monitoring for unauthorized access attempts.

3. Certificate Validation: TLS certificate for gitea.aktechunited.com is properly configured via Let's Encrypt.

4. Geolocation Consistency: Historical data shows US geolocation observation alongside Singapore designation. Verify if dual-region deployment or data inconsistency.

5. Route Stability: Route stability flagged as false. Monitor BGP announcements for potential infrastructure changes.

## SOC Action

No immediate containment or blocking actions recommended. This IP represents legitimate cloud hosting infrastructure with standard web server configuration. Continue standard monitoring practices for SSH access and TLS traffic patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.