165.22.190.47📋 Copy

# IP Intelligence Briefing: 165.22.190.47

Classification: Moderate Risk (Score: 50/100)

Organization: DigitalOcean, LLC (ASN 14061)

Network: DIGITALOCEAN-165-22-0-0 /16

Location: North Bergen, New Jersey, US

## Executive Summary

IP 165.22.190.47 is a DigitalOcean cloud host exhibiting moderate risk characteristics. The address is cloud-resident with SSH service exposure and appears on multiple DNSBL lists. Historical data indicates recent blacklist activity with high-severity ratings.

## Technical Profile

Infrastructure Classification:

• Cloud hosting provider: DigitalOcean
• Connection type: CloudCompute
• Not identified as CDN, VPN, proxy, or Tor exit node

Network Services:

• Port 22/TCP: Open (SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18)
• No HTTP/HTTPS services detected
• No TLS certificates resolved

Control Plane Status:

• BGP Prefix: 165.22.176.0/20
• Route Stability: Unstable (isRouteStable: false)
• DNSSEC: Valid
• DNSBL Listings: 1 listing across 8 total lists

## Threat Indicators

Reputation Signals:

• Listed on 1 DNS blacklist entry
• Historical observations show blacklist activity with "high" severity ratings
• No known attacker campaigns identified
• No Tor exit node activity detected
• Not classified as spam source

Risk Assessment:

• Overall Risk Score: 50 (Moderate)
• Provider Score: 0
• Authority Score: 0
• Neighborhood abuse density: 0.1 (mostly_clean classification)
• Threat sibling count: 1 in /24 subnet

## Observation History

Twenty-one historical observations recorded. Recent signals (August 12, 2026) show:

• Cloud infrastructure identification with 90% confidence
• Blacklist listings with high severity ratings
• Operator score: 0.1304 (Minimal)
• No persistent malicious behavior detected

## Geographic Validation

• Reported location: North Bergen, NJ, US
• Geolocation confidence: Low (geoPlausible: false)
• RTT anomalies detected (22ms observed vs. 119.3ms minimum possible for 5,963km)

## Recommended Actions

Based on the risk profile, the following blocking rules are recommended:

Firewall Rules:

```bash

# iptables

iptables -A INPUT -s 165.22.190.47 -j DROP

# nftables

nft add rule inet filter input ip saddr 165.22.190.47 drop

# nginx

deny 165.22.190.47;

# pfSense

165.22.190.47/32

```

WAF Configuration:

• Cloudflare: Block IP with expression `ip.src eq 165.22.190.47`
• AWS WAF: Add address 165.22.190.47/32 to rule set

## Intelligence Notes

This IP is associated with DigitalOcean cloud infrastructure. The moderate risk score is driven primarily by DNSBL listings rather than active threat indicators. The neighborhood analysis shows low abuse density in the /24 subnet. No organizational relationships beyond the DigitalOcean network block were identified.

Assessment: Monitor for escalation. Current risk level warrants defensive blocking but does not indicate active exploitation or malicious campaign participation.

---

*Report generated: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.