162.243.89.46📋 Copy

# IP Intelligence Briefing: 162.243.89.46/32

## Executive Summary

IP address 162.243.89.46 is registered to DigitalOcean, LLC (ASN 14061) and classified as Low Risk with a risk score of 25. The IP is hosted on DigitalOcean's cloud infrastructure in Secaucus, NJ, and currently shows no open services or active threat indicators. However, recent observation history indicates intermittent threat signals requiring monitoring.

## Ownership and Infrastructure

## Threat Profile

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Null
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False

Threat Indicators: No active threat indicators detected. Known campaigns: None.

## Network Classification

• Provider: DigitalOcean
• Cloud Infrastructure: Yes
• Hosting Service: Yes
• Open Ports: None detected
• Active Services: None detected (firewalled)
• PTR Records: None
• Forward Resolution: Not confirmed

## Neighborhood Analysis

The IP resides within subnet 162.243.89.0/24:

• Abuse Density: 1 (Low)
• Classification: Mostly clean
• Inherited Risk: 2
• Threat Siblings: 1
• Active Siblings: 0

## Observation History

Sixteen observations recorded. Key findings:

• 2026-06-21: Recent signal detected with `has_threats: true` and 4 associated threat pulses (confidence: 0.75)
• 2026-06-16: Multiple ownership and subnet classification signals
• Threat Persistence: 0 days (not persistently malicious)

## Control Plane Data

• Route Stability: False
• Operator Score: 0.1304 (Minimal)
• BGP Prefix: 162.243.0.0/17
• RPKI State: Not applicable
• IRR Consistency: Not applicable

## Recommended Actions

1. Monitor for recurring threat signals despite current low-risk classification

2. Block if threat indicators escalate or additional DNSBL listings appear

3. Investigate the 1 threat sibling within the /24 subnet

4. Standard Cloud Policy: Treat as cloud infrastructure; apply appropriate cloud security controls

## Intelligence Assessment

The IP demonstrates stable cloud infrastructure behavior with no current malicious activity. The single DNSBL listing and recent threat pulse signals warrant continued monitoring. The inherited risk from neighboring IPs and the one threat sibling in the /24 subnet should be investigated if operational context suggests correlation. No immediate blocking required; maintain observation posture.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.