157.245.125.229
Network analysis identified 157.245.125.229 as a hosting asset associated with DigitalOcean, LLC under ASN 14061. Geolocation data placed the infrastructure in Clifton, New Jersey. The asset presented a Low Risk reputation score of 25.
Passive scanning detected open TCP ports 80 and 22. Port 80 responded with an HTTP status of 200 and a server banner of nginx/1.18.0 (Ubuntu). SSH services were active on port 22. DNS forward confirmation failed, and no reverse PTR records were available. Email authentication mechanisms, including SPF and DMARC, were not configured.
Threat intelligence feeds returned no blacklist hits, known attacker flags, or association with active campaigns. The surrounding subnet (157.245.125.0/24) maintained a clean classification with zero threat siblings. However, one contradiction existed between claimed geolocation and RTT physics measurements, resulting in a Very Low overall confidence score of 0.2083.
The asset remained active between 2026-09-06 and 2026-09-14. Despite the lack of direct malicious indicators, the system classified the host as "Suspicious" due to signal inconsistencies. The recommended action was to monitor the endpoint for behavioral changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-157-245-0-0 |
| CIDR Block | 157.245.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | nginx/1.18.0 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.13 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 17 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-06 18:46:08 UTC |
| Last Seen | 2026-09-14 10:13:30 UTC |
| Profile Built | 2026-09-14 10:21:29 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 25 |
Full dossier details are available via our API.