174.138.83.43📋 Copy

## IP Intelligence Briefing: 174.138.83.43/32

Classification: Low Risk Cloud Infrastructure Endpoint

Date: 2026-06-20

Executive Summary

IP 174.138.83.43 is a DigitalOcean cloud compute endpoint presenting a low-risk profile (risk score: 25/100) with standard web server services. The IP is hosted in Clifton, NJ, USA within DigitalOcean's 174.138.80.0/20 BGP prefix. While the infrastructure shows minimal abuse characteristics, route stability concerns and DNSBL listing warrant monitoring.

Infrastructure Profile

Network Services & Exposed Ports

The IP presents three open ports:

• Port 80/tcp (HTTP)
• Port 443/tcp (HTTPS)
• Port 22/tcp (SSH)

No TLS certificates, HTTP titles, or server banners were detected. Email authentication records (SPF/DMARC) are absent.

Threat Indicators

• Blacklist Status: Listed on 1 of 8 DNSBLs
• Threat Indicators: None detected
• Known Campaigns: None correlated
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not assigned

Control Plane Analysis

• BGP Prefix: 174.138.80.0/20
• Operator Score: 0.1304 (Minimal)
• Route Stability: False (route changes observed in last 30 days)
• DNSSEC: Valid
• Route Changes (30d): 0

Neighborhood Assessment

The /24 subnet (174.138.83.43/24) shows:

• Abuse Density: 0 (minimal)
• Risk Classification: Mostly clean
• Active Siblings: 1
• Threat Siblings: 1
• Risk Inheritance: 2

Observation History

19 signals observed with the most recent activity on 2026-06-20. Signal types include:

• Network classification (cloud infrastructure confirmed)
• Routing analysis
• Service fingerprinting
• Ownership verification
• Reputation scoring
• Geolocation validation

Geolocation Validation

RTT analysis indicates a potential discrepancy:

• Measured RTT: 23.0ms
• Expected Minimum RTT: 119.4ms (for 5,967km distance)
• Probe Count: 5
• Status: RTT violation detected

Relationships

19 "Same Network" relationship entries identified, all mapping to DIGITALOCEAN-174-138-0-0 network block. No certificate or hostname relationships detected.

Security Assessment

The IP demonstrates characteristics of legitimate cloud hosting infrastructure with minimal threat indicators. However, the following factors warrant defensive monitoring:

1. DNSBL Listing: Presence on 1 blacklist requires validation

2. Route Instability: Route changes detected within the 30-day window

3. SSH Exposure: Port 22 accessible (standard for cloud hosting)

4. Geolocation Anomaly: RTT discrepancy suggests potential misconfiguration or spoofing

Recommended Actions

• Monitor DNSBL listing status for removal
• Verify geographic consistency with traffic patterns
• Apply standard cloud hosting security controls
• No immediate blocking recommended; maintain observation

Analyst Note: This endpoint is consistent with normal DigitalOcean hosting operations. Continued monitoring recommended for route stability and DNSBL status changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.