178.128.95.124📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 178.128.95.124/32

Date: 2026-06-17

Classification: Low Risk | Cloud Infrastructure

---

## EXECUTIVE SUMMARY

IP 178.128.95.124 is a DigitalOcean cloud compute instance located in Singapore with a low-risk profile (Risk Score: 25). The IP exhibits minimal malicious indicators and operates within a moderately active subnet. No immediate defensive action is required, but monitoring is recommended due to route instability and neighborhood activity.

---

## OWNERSHIP & INFRASTRUCTURE

• ASN: 14061 (DigitalOcean)
• Organization: DigitalOcean
• Geolocation: Singapore (SG) – 1.35°N, 103.82°E
• Infrastructure Type: Cloud Compute
• CIDR Block: 178.128.80.0/20 (BGP Prefix)
• Network Classification: Cloud-hosted, single-service host

---

## RISK ASSESSMENT

Threat Indicators: None detected. IP is not flagged as a Tor exit node, known attacker, or spam source.

---

## NETWORK & ROUTING

• Route Stability: Unstable (isRouteStable: false)
• 30-Day Route Changes: 0
• RPKI State: Not validated
• IRR Consistency: Not available

Observation: Route instability may indicate transient cloud resource allocation or BGP policy changes.

---

## SERVICES & PORTS

• Open Port: 22/TCP (SSH)
• SSH Banner: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16
• TLS Certificate: None detected
• HTTP Service: None detected

Analysis: SSH service is actively running. Standard cloud computing configuration.

---

## DNS & EMAIL REPUTATION

• PTR Hostnames: None
• Forward Resolution: 0
• SPF Record: Not present
• DMARC Record: Not present
• Hosted Domains: 0

Note: No email authentication records configured.

---

## NEIGHBORHOOD ANALYSIS (178.128.95.0/24)

• Abuse Density: 0.5 (Moderate)
• Subnet Classification: Mostly clean
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 1
• Neighbor IP: 178.128.95.99 (Risk Score: 0, Authority Score: 50)

Context: The subnet exhibits moderate activity with one identified threat sibling. Neighbor 178.128.95.99 maintains a clean profile with high authority score.

---

## OBSERVATION HISTORY

• Total Observations: 19
• Latest Observation: 2026-06-17T18:34:02
• Historical Pattern: Consistent Singapore geolocation reporting
• Risk Trend: Stable (Minimal operator score maintained at 0.1304)

Temporal Analysis: IP has demonstrated consistent characteristics across observation periods with no significant risk escalation.

---

## RELATIONSHIP GRAPH

• Total Relationships: 22
• Primary Relationship: Same Network (DigitalOcean) – 22 instances
• Correlated Entities: No external campaigns, certificates, or hostnames identified

Assessment: IP is isolated within its cloud infrastructure with no external entity associations.

---

## SECURITY RECOMMENDATIONS

Current Risk: Low (Score: 25) – No immediate action required.

Monitoring Considerations:

1. Route instability detected – verify cloud resource allocation

2. One DNSBL listing – investigate source

3. Neighborhood threat sibling present – monitor subnet activity

4. SSH service open – ensure access controls are appropriate

Recommended Actions: None required at this time. Standard cloud security baselines apply.

---

## CONCLUSION

IP 178.128.95.124 represents a standard DigitalOcean cloud compute instance in Singapore with low-risk characteristics. The infrastructure shows typical cloud service patterns with SSH enabled. No active malicious indicators are present. Continue routine monitoring; no immediate defensive measures required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.