THREAT INTELLIGENCE BRIEFING
IP Address: 164.90.211.108/32
Date: 2026-08-13
Classification: Cloud Infrastructure (DigitalOcean)
EXECUTIVE SUMMARY
The target IP 164.90.211.108 is a DigitalOcean cloud infrastructure endpoint located in Frankfurt am Main, Germany. Current risk assessment indicates LOW RISK with no active threat indicators. The IP is classified as cloud infrastructure (isCloud: true) with no open services detected.
OWNERSHIP & GEOLOCATION
- Organization: DigitalOcean, LLC
- ASN: AS14061
- Network: DIGITALOCEAN-164-90-128-0
- CIDR Block: 164.90.128.0/17
- Location: Frankfurt am Main, Hesse, Germany (DE)
- RIR Registration: ARIN (allocated 2019-08-19)
THREAT ASSESSMENT
| Metric | Value |
|---|---|
| Risk Score | 0 |
| Provider Score | 0 |
| Authority Score | 0 |
| Abuse Confidence | None detected |
| Blacklist Count | 0 |
| Tor Exit Node | No |
| Known Attacker | No |
| Spam Source | No |
NETWORK CLASSIFICATION
- Infrastructure Type: Cloud hosting
- Connection Type: Cloud (not residential/mobile)
- CDN/Proxy/VPN: No
- Services: Firewalled / No services detected
- DNS Records: No PTR hostnames, no forward resolution
- Email Auth: SPF/DMARC not configured
CONTROL PLANE ANALYSIS
- BGP Prefix: 164.90.208.0/20
- Route Stability: Unstable (false)
- DNSSEC Status: Valid
- DNSBL Listings: 0 of 8 lists
- RPKI State: Not assessed
- IRR Consistency: Not assessed
NEIGHBORHOOD ANALYSIS
- Subnet: 164.90.211.0/24
- Abuse Density: 0 (clean)
- High-Risk Neighbors: 0
- Medium-Risk Neighbors: 0
- Total Neighbors: 0
RELATIONSHIP MAPPING
- Primary Relationship: Same Network (DIGITALOCEAN-164-90-128-0)
- Associated Entities: None detected
- Certificates: None
- Campaign Correlations: None
HISTORICAL OBSERVATIONS
Total observations: 12
Recent signal history from 2026-08-13:
- Geolocation: Consistently reported as Frankfurt am Main, Germany (confidence: 0.70-0.75)
- ASN Resolution: AS14061 DigitalOcean, LLC (confidence: 0.85)
- DNSSEC: Valid (confidence: 0.90)
- Threat Pulses: 3 pulses detected in one observation (source: AlienVault OTX), though no specific threat indicators confirmed
- DNSBL Listings: 8 total lists monitored, 0 listings (confidence: 0.50)
SECURITY ACTIONS RECOMMENDATION
Based on current risk profile (Risk Score: 0), no immediate blocking or firewall actions are recommended. The IP represents legitimate cloud infrastructure with no active malicious indicators.
INTEL NOTE
This IP belongs to DigitalOcean's Frankfurt datacenter infrastructure. The /24 neighborhood shows zero abuse density, indicating this subnet is not currently compromised. The IP has no open services and is properly firewalled. No email authentication records are present, which is typical for cloud infrastructure endpoints.
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-164-90-128-0 |
| CIDR Block | 164.90.128.0/17 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 25% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-06 12:47:36 UTC |
| Last Seen | 2026-08-13 08:58:50 UTC |
| Profile Built | 2026-08-13 09:14:21 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.