INTELLIGENCE BRIEFING: IP 165.22.63.98/32
Classification: LOW RISK β Cloud Infrastructure
Date: 2026-06-22
---
**EXECUTIVE SUMMARY**
IP 165.22.63.98 is identified as a low-risk (score: 25) DigitalOcean cloud infrastructure address located in Singapore. The IP exhibits minimal threat indicators with no known malicious campaigns, zero blacklist hits, and no active services exposed. The subnet shows moderate abuse density (0.5) but maintains "mostly_clean" classification.
---
**TECHNICAL PROFILE**
| Attribute | Value |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **ASN** | 14061 (DigitalOcean, LLC) |
| **Country** | Singapore (SG) |
| **Infrastructure** | Cloud Compute / Hosting |
| **Control Plane** | Route stable, DNSSEC validated |
| **Operator Score** | 0.2174 (Minimal) |
| **DNSBL Status** | 1/8 lists |
Geolocation: Singapore (1.35°N, 103.82°E) β 45km accuracy radius, geoconsensus confirmed.
---
**THREAT INDICATORS**
Active Signals: None detected
- Not a Tor exit node, known attacker, or spam source
- Zero blacklist entries
- No known threat campaigns correlated
- No active open ports or TLS certificates
Historical Context:
- 22 observations recorded (most recent: 2026-06-22)
- Previous subnet assessment (2026-06-18): "mostly_clean" classification with 0.5 abuse density
- Threat persistence: 0 days
- Not persistently malicious
---
**NEIGHBORHOOD ANALYSIS (165.22.63.0/24)**
| Metric | Value |
|---|---|
| **Subnet Abuse Density** | 0.5 |
| **Classification** | Mostly Clean |
| **Total Siblings** | 2 |
| **Active Siblings** | 1 |
| **Threat Siblings** | 1 |
| **Neighbor Risk Distribution** | 1 low-risk (165.22.63.215, score: 25) |
---
**RELATIONSHIP GRAPH**
- Network Associations: 31 relationships, primarily DigitalOcean network blocks (165.22.0.0/16)
- DNS Associations: Timeout errors detected during DNS resolution attempts
- No malicious entity correlations identified
---
**RECOMMENDATIONS**
Current Risk Level: Minimal
- No immediate blocking required
- Standard cloud infrastructure monitoring applies
- No specific firewall rules recommended
SOC Actions:
- Monitor for service enumeration or port scanning activity
- Review any inbound connection attempts against baseline
- Continue standard cloud provider threat monitoring procedures
---
Intel Generated: IPDebrief Platform
Status: Factual, defensive intelligence report
Distribution: SOC analysts, Network Defense teams
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 11% | 1 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 21% | 2 | 2 |
| Overall | 20% | 9 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-07 23:03:51 UTC |
| Last Seen | 2026-06-27 01:15:54 UTC |
| Profile Built | 2026-06-28 01:53:01 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 27 |
Full dossier details are available via our API.