146.190.95.179📋 Copy

## IP Intelligence Briefing: 146.190.95.179/32

Assessment Date: 2026-06-21

Executive Summary

IP 146.190.95.179 is a DigitalOcean cloud compute infrastructure address assigned to network DO-13 (146.190.0.0/16) with a low-risk profile (Risk Score: 25). The subnet 146.190.95.0/24 shows zero abuse density and is classified as clean. No active threat indicators or malicious campaigns were detected.

Infrastructure Profile

• Organization: DigitalOcean, LLC (ASN 14061)
• Network: DO-13 (146.190.0.0/16)
• Geolocation: Singapore (SG), coordinates 1.35°N, 103.82°E
• Infrastructure Type: CloudCompute (Cloud Hosting)
• Classification: Firewall-enabled / No active services detected
• Connection Type: Cloud infrastructure, not CDN/VPN/Proxy

Threat Indicators

• Reputation: Low Risk
• Blacklist Status: 0 active blacklists; 1 DNSBL listing out of 8 total lists
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Affiliation: None detected
• Open Ports: None detected (firewalled)

Network Neighborhood Analysis

• Subnet: 146.190.95.0/24
• Abuse Density: 0 (clean)
• Threat Siblings: 0
• Total Active Siblings: 0
• Classification: Clean subnet

Historical Observations (16 signals)

Observations span from 2026-06-16 to 2026-06-21. Key findings:

• No ownership changes detected
• No persistent malicious activity
• One DNSBL listing event recorded with high severity (2026-06-16)
• Stability indicators show no concerning trends
• No route changes or BGP anomalies in 30-day window

Control Plane Data

• BGP Prefix: 146.190.80.0/20
• Route Stability: False (minor fluctuations)
• RPKI State: Not validated
• DNSSEC Valid: Yes
• Hop Count: 13 hops to destination
• Transit Networks: Comcast, Lumen

Recommended Actions

No immediate blocking or mitigation actions recommended based on current risk profile. The IP maintains a low-risk designation with no active threat indicators. Standard cloud provider traffic monitoring applies.

Intelligence Assessment

This IP represents normal cloud hosting infrastructure with no evidence of malicious activity. The single DNSBL listing appears to be a false positive or transient listing given the overall clean classification and zero abuse density in the subnet. SOC teams may treat this as benign cloud traffic, but continued monitoring is recommended given the DNSBL history.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.