134.122.36.255📋 Copy

## IP INTELLIGENCE BRIEFING: 134.122.36.255/32

Classification: Cloud Infrastructure IP | Risk Level: Low (Score: 25) | Status: Non-Malicious

---

**Ownership & Infrastructure**

• Organization: DigitalOcean, LLC (ASN: 14061)
• Network: DIGITALOCEAN-134-122-0.0/17
• Infrastructure Type: Cloud Compute / Single-Service Host
• Geolocation: Toronto, Ontario, US (RIR: ARIN)

**Network Role**

• Classification: Cloud provider infrastructure with hosting services
• Connection Type: Not CDN, VPN, proxy, or Tor exit
• Network Classification: Not bogon or anycast

**Security Posture**

• DNSSEC: Valid
• Email Auth: SPF configured, DMARC absent
• Operator Score: 0.3043 (Basic operator rating)
• Route Stability: Unstable (0 route changes in 30 days)

**Threat Assessment**

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threat Campaigns: None detected
• Blacklist Status: 1 DNSBL listing out of 8 total lists

**DNS Analysis**

• PTR Record: prod-krypton-tor1-2.do.binaryedge.ninja
• Forward Resolution: Confirmed
• Hosted Domains: 0
• Associated Domain: binaryedge.ninja (noted as a known reconnaissance/scan infrastructure domain)

**Open Services**

• Port 22/TCP: SSH (OpenSSH 8.9p1 Ubuntu-3ubuntu0.16)

**Observation History**

• Total Signals: 25 observations tracked
• Recent Activity: Multiple signal types including operator scoring, geolocation, and threat listings
• Persistence: No persistent malicious behavior detected

**Network Neighborhood**

• Subnet: 134.122.36.255/24
• Abuse Density: 0 (Clean subnet)
• Threat Siblings: 0
• Active Siblings: 1

**Control Plane Data**

• BGP Prefix: 134.122.32.0/20
• RPKI State: Not validated
• DNSBL Listed: 1 listing

**Recommended Actions**

Based on the IP's low-risk profile and cloud infrastructure nature:

1. Monitor, Do Not Block: Low-risk score (25) indicates minimal threat

2. SSH Traffic: Standard cloud port; allow if legitimate traffic expected

3. DNSBL Watch: Monitor for changes in blacklist status

4. Geolocation Validation: RTT validation shows implausible Toronto location (6078km distance with 49ms RTT violation)

---

Summary: This IP represents a legitimate DigitalOcean cloud compute instance with low-risk characteristics. No active threat indicators present. The PTR hostname (prod-krypton-tor1-2.do.binaryedge.ninja) indicates association with reconnaissance infrastructure, but the IP itself shows no malicious activity. No immediate blocking required; standard monitoring recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.