164.90.228.79📋 Copy

IP Intelligence Briefing: 164.90.228.79

Date: 2026-06-06

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: DigitalOcean, LLC (ASN 14061)
• Geolocation: Frankfurt am Main, Germany (DE)
• Network Role: CloudCompute (DigitalOcean infrastructure)
• Services:

- Open ports: HTTP (80/TCP), SSH (22/TCP)

- SSH banner: `SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u7`

- HTTP server: `lighttpd/1.4.59`

---

**2. Threat Indicators**

• No malicious activity detected: No indicators of compromise (IoCs), spam, or known attacker activity.
• DNS Associations: Linked to `fee8d5bfdc.scan.leakix.org` (data leakage source).
• BGP: Subnet `164.90.224.0/20` with stable routing (no route changes in 30 days).

---

**3. Observation History**

• Temporal Stability: No persistent malicious behavior; threat observation count: 1.
• Recent Activity:

- HTTP service observed with benign server banner.

- DNSSEC validation passed; no DNSBL listings.

---

**4. Relationships**

• Network: Part of DigitalOcean’s `DIGITALOCEAN-164-90-128-0` network.
• DNS: Associated with `leakix.org` (potential data leakage risk).
• Certificates: No TLS certificates detected.

---

**5. Neighborhood Analysis**

• Subnet: `164.90.228.79/24`
• Abuse Density: 0.5 (mostly clean, but 1 high-risk neighbor).
• Neighbors:

- `164.90.228.56` (risk score: 25, authority score: 50).

---

**6. Recommendations**

• Monitor DNS: Investigate the link to `leakix.org` for potential data exfiltration.
• Check Neighbor: Review `164.90.228.56` for abnormal activity.
• Validate TLS: Ensure HTTPS is configured if sensitive services are exposed.
• SOC Actions:

- Add to allowlist for legitimate cloud infrastructure.

- Monitor for unexpected DNS or network changes.

---

End of Briefing

*Generated via IPDebrief threat intelligence platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.