165.22.217.9

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

INTELLIGENCE BRIEFING: 165.22.217.9

Classification: Low Risk / Cloud Infrastructure

Date: 2026-08-12

Analyst: IPDebrief Intelligence

---

EXECUTIVE SUMMARY

IP address 165.22.217.9 is a low-risk cloud compute endpoint hosted by DigitalOcean, LLC. The IP resides in Bengaluru, Karnataka, India (165.22.0.0/16). No active threat indicators were identified. The IP is classified as a single-service host with SSH (port 22) exposed.

---

RISK ASSESSMENT

Metric	Value	Assessment
Overall Risk Score	25	Low Risk
Provider Score	0	Standard Cloud Provider
Authority Score	0	No elevated authority
Abuse Confidence Score	N/A	Not listed

Threat Indicators:

Known attacker: False
Spam source: False
Tor exit node: False
Blacklist count: 0
DNSBL listed: 1 of 8 total lists (dnsblListedCount: 1)

---

NETWORK PROFILE

Infrastructure:

Provider: DigitalOcean, LLC
ASN: 14061
CIDR Block: 165.22.0.0/16
Network Role: CloudCompute / Single-Service Host
Infrastructure Type: Cloud

Geolocation:

Country: India (IN)
Region: Karnataka
City: Bengaluru
GeoSources: 2 (consensus reached)

Services Detected:

Port 22/TCP (SSH)

Network Classification:

Cloud host: Yes
CDN: No
VPN: No
Proxy: No
Mobile carrier: No

---

NEIGHBORHOOD ANALYSIS (165.22.217.0/24)

Subnet Statistics:

Abuse Density: 0 (clean)
Classification: Clean
Total Siblings: 2
Active Siblings: 2
Threat Siblings: 0

Neighbor IPs:

165.22.217.1: Risk Score 25
165.22.217.106: No risk score available

---

TEMPORAL BEHAVIOR

Observation History: 20 signals recorded

Ownership changes: 0
Threat persistence: 0 days
Persistent malicious: False
Campaign likelihood: None

Control Plane:

Route stable: False
RPKI state: Unknown
IRR consistency: Unknown
Route changes (30d): 0

---

RELATIONSHIP MAPPING

All identified relationships link to the same network prefix (DIGITALOCEAN-165-22-0-0). No external organizational or hostname relationships detected beyond the provider network.

---

RECOMMENDED ACTIONS

No immediate firewall or blocking actions recommended. The IP presents a low-risk profile consistent with legitimate cloud infrastructure operations.

Monitoring Recommendations:

Monitor for service changes (currently SSH-only)
Track for potential DNSBL listing changes
Include in baseline monitoring for cloud provider activity

---

END OF BRIEFING

*This intelligence was generated using IPDebrief analytical tools. Data represents the current state as of the observation timestamp.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇮🇳 India
Region	Karnataka
City	Bengaluru
Timezone	—
Latitude	12.98
Longitude	77.59

🏢 Ownership & Registration

Organization	DigitalOcean, LLC
ASN	AS14061
Network Name	DIGITALOCEAN-165-22-0-0
CIDR Block	165.22.0.0/16
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	20% (Poor)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Single-Service Host
Network Tier	Hosting — Infrastructure provider without advanced routing

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
22	ssh	tcp	—
Closed Ports	25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	30%	2	3
routing	13%	1	1
services	19%	2	2
ownership	27%	2	3
reputation	17%	1	2
geolocation	13%	1	1
Overall	20%	9	12

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-07-24 14:25:59 UTC
Last Seen	2026-08-12 18:38:16 UTC
Profile Built	2026-08-12 23:50:29 UTC
Data Freshness	Live
Signal Types	19
Total Observations	20

🔍 19 signal types · 20 observations collected

This report is generated from 19+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

165.22.217.9📋 Copy