206.189.158.221📋 Copy

# IP Intelligence Briefing: 206.189.158.221/32

Classification: Low Risk Cloud Infrastructure

Date: Intelligence generated from IPDebrief analysis

Location: Singapore (Pioneer)

---

## Executive Summary

IP 206.189.158.221 is a DigitalOcean cloud compute resource with low-risk characteristics. The asset operates within a cloud hosting environment with no active services or open ports. Historical observations indicate stable infrastructure with minimal threat indicators.

---

## Infrastructure Profile

Ownership & Provider:

• ASN: 14061 (DigitalOcean, LLC)
• RIR: ARIN
• Infrastructure Type: CloudCompute
• Network Classification: Cloud provider infrastructure

Geolocation:

• Country: Singapore (SG)
• City: Singapore (Pioneer)
• Coordinates: 1.35°N, 103.82°E
• Timezone: Asia/Singapore

DNS Configuration:

• PTR Hostname: goldstar8.it.com
• Forward Resolution: Unconfirmed
• Email Authentication: SPF and DMARC records present
• Forward Hostnames: 1 (goldstar8.it.com)

---

## Risk Assessment

Overall Risk Score: 25/100 (Low Risk)

Risk Breakdown:

• Reputation: Low Risk
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False

Control Plane Indicators:

• DNSSEC: Valid
• CAA Records: Present
• Operator Score: 0.2174 (Minimal)
• BGP Prefix: 206.189.144.0/20
• Route Stability: Variable

---

## Threat Indicators

Current Threat Status: No active threats detected

• Known campaigns: None
• Threat feeds: No indicators
• DNSBL Listings: 1 out of 8 total lists
• Threat observation count: 1

Behavioral Indicators:

• Honeypot hits: 0
• Enumeration strikes: 0

---

## Neighborhood Analysis

Subnet: 206.189.158.221/24

• Abuse Density: 1
• Classification: Mostly Clean
• Inherited Risk: 7

Sibling IP Risk Distribution:

• High Risk: 0
• Medium Risk: 1 (206.189.158.96, score: 50)
• Low Risk: 1 (206.189.158.131, score: 25)

Total siblings in subnet: 3

Active siblings: 1

Threat siblings: 3

---

## Observation History

Total Observations: 26 signals

Recent Activity (June 2026):

• ASN confirmation: AS14061 DigitalOcean LLC (Singapore)
• Operator assessment: Minimal
• Subnet abuse density: 1, classification: mostly_clean
• Multiple DNS and control plane validations

Temporal Analysis:

• Ownership changes: 0
• Threat persistence: Not persistently malicious
• Threat observation count: 1

---

## Network Services

Open Ports: None detected

Service Status: Firewalled / No Services

TLS Certificates: None

HTTP Title: None

Server Banner: None

The IP is not responding to service probes, consistent with a cloud hosting environment configured for security through firewall rules.

---

## Network Relationships

Identified Relationships: 33

• Primary classification: Same Network (DIGITALOCEAN-206-189-0-0)
• Multiple network-level associations detected

---

## Recommended Actions

Based on the low-risk profile and cloud infrastructure classification:

1. Allow Traffic: Standard permit rules for established connections

2. No Blocking Required: Risk score below threshold for defensive blocking

3. Monitor Subnet: Maintain awareness of sibling IP 206.189.158.96 (risk score: 50)

4. DNS Validation: SPF and DMARC records present; continue monitoring email authentication status

---

## Assessment Conclusion

IP 206.189.158.221 represents legitimate DigitalOcean cloud infrastructure with no current malicious activity. The asset operates as a firewalled cloud compute resource with standard security configurations. No immediate defensive actions required. Continue routine monitoring of associated subnet 206.189.158.0/24, particularly the medium-risk sibling IP 206.189.158.96.

Threat Level: LOW

Action Required: NONE - Routine monitoring sufficient

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.