165.227.231.224📋 Copy

IP Intelligence Briefing: 165.227.231.224

Date: 2026-06-08

---

**1. Core Profile**

• Risk Rating: Low Risk (25/100) | No malicious indicators detected.
• Ownership: DigitalOcean, LLC (ASN 14061) | CloudCompute infrastructure.
• Geolocation: Slough, England, UK (plausible, 750km accuracy radius).
• Network Role: Cloud VM (nginx/1.24.0 server, SSH, HTTP/HTTPS services).
• TLS Certificate: Valid Let’s Encrypt certificate for `management.cargo.ir` (SAN).

---

**2. Threat & Security Observations**

• No Malicious Activity: Zero threat indicators, abuse confidence score not applicable.
• Service Fingerprint: Standard nginx server with SSH version `OpenSSH_9.6p1`.
• DNS: No PTR records or email auth (SPF/DKIM).
• TLS Scan: Valid TLS 1.3 connection with AES-256-GCM cipher.
• Geolocation Consistency: Plausible UK location with 201ms average RTT.

---

**3. Network Relationships**

• Subnet: Part of DigitalOcean’s `165.227.0.0/16` network.
• Neighbors: No sibling IPs detected in the /24 subnet.
• Abuse Density: Subnet classified as "mostly_clean" (abuse density 1/10).

---

**4. Historical Trends**

• Stability: No ownership or threat persistence changes.
• Recent Activity: Single observation (June 8, 2026) with no anomalous behavior.

---

**5. Actionable Insights**

• No Immediate Threat: Low-risk IP with no malicious signals.
• Monitor Subnet: Verify consistency with DigitalOcean’s infrastructure.
• Validate Certificate: Ensure the Let’s Encrypt certificate remains valid for `management.cargo.ir`.
• Network Segmentation: Consider isolating cloud VMs if elevated access is required.

---

Conclusion:

This IP represents a standard cloud server operated by DigitalOcean, with no evidence of malicious activity. No defensive actions are required, but continued monitoring is advised to detect any potential shifts in behavior.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.