# IP Intelligence Briefing: 165.227.149.5/32
Classification: LOW RISK
Risk Score: 25/100
Status: Active Cloud Infrastructure
## Summary
The IP address 165.227.149.5 is a DigitalOcean cloud compute instance located in Frankfurt am Main, Germany (ASN 14061). The IP presents minimal threat indicators with a low overall risk score of 25. No active malicious campaigns or known attacker signatures have been detected.
## Ownership & Infrastructure
- Organization: DigitalOcean, LLC
- Network Block: DIGITALOCEAN-165-227-0-0
- BGP Prefix: 165.227.144.0/20
- Infrastructure Type: CloudCompute
- Classification: Single-Service Host
## Geolocation & Network Context
- Location: Frankfurt am Main, Germany (Hesse)
- Coordinates: 50.12°N, 8.68°E
- Timezone: Europe/Berlin
- Geolocation Confidence: High (GeoPlausible: true, GeoConsensus: true)
- Average RTT: 113ms from probe origin
## Network Activity
- Open Ports: TCP/22 (SSH) - OpenSSH_9.6p1 Ubuntu-3ubuntu13.16
- DNS Status: No PTR record, no forward resolution
- Email Authentication: No SPF, DMARC, or TXT records configured
- TLS Certificate: Not detected
## Threat Indicators
- Abuse Confidence: Not assessed (no active threats)
- Blacklist Status: Listed on 1 of 8 DNSBL lists
- Known Campaigns: None detected
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
## Neighborhood Analysis
- Subnet: 165.227.149.0/24
- Abuse Density: Low (1)
- Classification: Mostly Clean
- Active Siblings: 1
- Threat Siblings: 1
## Historical Observations
- Total Observations: 21
- Observation Period: Through 2026-08-13
- Ownership Changes: 0
- Threat Persistence: None detected
- Persistently Malicious: No
## Control Plane Status
- Route Stability: False
- RPKI State: Not assessed
- IR Consistency: Not assessed
- Route Changes (30d): 0
## Recommended Actions
No specific blocking or filtering actions are currently recommended. The IP maintains a low risk profile with no actionable threat indicators. Standard monitoring is appropriate.
---
*Intelligence generated from IPDebrief analysis. Monitor for changes in risk profile and re-evaluate if suspicious activity is detected.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-165-227-0-0 |
| CIDR Block | 165.227.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | *.k.db.ondigitalocean.com |
| Valid From | 2026-07-04T13:23:53+00:00 |
| Valid Until | 2026-10-02T13:23:52+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 056BCDFE15C1AC87BCE7EF9C173462BD7602 |
| Thumbprint | 81E863654B0520909B23E9C91EF4A420421022A0 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 24% | 2 | 2 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-02 10:53:26 UTC |
| Last Seen | 2026-08-13 03:35:04 UTC |
| Profile Built | 2026-08-13 03:53:56 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.