165.22.126.74

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

INTELLIGENCE BRIEFING: 165.22.126.74/32

Classification: Low Risk | Infrastructure: CloudCompute (DigitalOcean) | Location: Slough, England, GB

---

EXECUTIVE SUMMARY

IP 165.22.126.74 is a DigitalOcean cloud infrastructure endpoint classified as Low Risk (risk score: 15). The address operates within the DIGITALOCEAN-165-22-0-0 network (ASN 14061) with no active services detected. Neighborhood analysis confirms low abuse density (0) within the /24 subnet.

---

TECHNICAL PROFILE

ASN/Provider: 14061, DigitalOcean, LLC
Network: 165.22.0.0/16 (DIGITALOCEAN-165-22-0-0)
Geolocation: GB (England, Slough) – 750km accuracy radius
Infrastructure: CloudCompute, Hosting-enabled
Services: No open ports detected; firewall/no-service profile
DNS: No reverse resolution; forward confirmation: false

---

THREAT INDICATORS

Abuse Confidence Score: Not calculated (null)
Blacklist Status: 0 entries (current); 1 high-severity listing detected in observation history
Known Campaigns: None
Tor/Proxy/VPN: Not detected
Threat Feeds: Empty

---

BEHAVIORAL ANALYSIS

Observation Count: 26 historical observations
Route Stability: 1 route change in 30-day period (non-stable)
Operator Score: 0.3913 (Basic routing assessment)
Threat Persistence: 0 days observed; not persistently malicious
Control Plane: RPKI valid, BGP prefix: 165.22.112.0/20, AS path: 57866 14061

---

NEIGHBORHOOD CONTEXT

Subnet: 165.22.126.74/24
Abuse Density: 0 (mostly clean classification)
Total Siblings: 1; Active Siblings: 1; Threat Siblings: 1
Inherited Risk: 2 (minimal neighborhood threat)

---

RELATIONSHIP GRAPH

12 relationship entries identified
All relationships map to Same Network: DIGITALOCEAN-165-22-0-0
No cross-entity links to external organizations, hostnames, or certificates

---

RECOMMENDED ACTIONS

No specific firewall rules or blocking recommendations generated. The IP presents minimal threat characteristics. Routine monitoring is sufficient unless additional contextual threat intelligence emerges.

---

INTEL SOURCES & QUALITY

Provider: IPDebrief
Data Confidence: Variable (0.30–0.90 per observation)
Last Updated: 2026-08-12 (based on observation timestamps)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇬🇧 United Kingdom
Region	England
City	Slough
Timezone	Europe/London
Latitude	51.52
Longitude	-0.62

🏢 Ownership & Registration

Organization	DigitalOcean, LLC
ASN	AS14061
Network Name	DIGITALOCEAN-165-22-0-0
CIDR Block	165.22.0.0/16
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	20% (Poor)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Firewalled / No Services
Network Tier	Tier 3 — Basic operator with some routing infrastructure

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	36%	2	4
routing	36%	3	4
services	19%	2	2
ownership	34%	3	4
reputation	28%	1	3
geolocation	27%	2	3
Overall	30%	13	20

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (65%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-07-25 21:00:25 UTC
Last Seen	2026-08-12 19:52:32 UTC
Profile Built	2026-08-12 20:07:39 UTC
Data Freshness	Live
Signal Types	25
Total Observations	28

🔍 25 signal types · 28 observations collected

This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

165.22.126.74📋 Copy