IP INTELLIGENCE BRIEFING: 165.232.190.130/32
Executive Summary
IP 165.232.190.130 is a low-risk cloud infrastructure address hosted by DigitalOcean, LLC within the Indian region (Bengaluru, Karnataka). The IP demonstrates minimal threat indicators with a risk score of 25/100 and no active malicious behavior observed across the analysis period.
Infrastructure Profile
The address belongs to DigitalOcean's cloud compute infrastructure (ASN 14061) under network DIGITALOCEAN-165-232-32-0 with CIDR block 165.232.32.0/19. The IP is classified as cloud infrastructure with services showing as "Firewalled / No Services" โ no open ports were detected during the scan. DNS resolution returned no PTR hostnames, and forward resolution confirmed no associated domains.
Geolocation Context
Geolocation data places the IP in India (IN), Karnataka, Bengaluru with a geolocation accuracy radius of 2,250 km. The geo consensus is valid with geolocation deemed plausible. Route stability is flagged as false, with one DNSBL listing detected across 8 total lists.
Threat Intelligence Assessment
No threat indicators were identified:
- No blacklist hits (blacklist count: 0)
- No known attacker associations
- No spam source classification
- No Tor exit node activity
- No active campaigns or correlated IPs
The IP exhibits low operator score (0.1304, labeled "Minimal") and zero abuse confidence scoring. Control plane analysis shows 1 route change detected over 30 days.
Observation History
Seventeen signal observations were recorded over the monitoring period. The most recent signals (2026-08-05) show minimal activity with confidence scores between 0.26 and 0.30. Historical scans from 2026-07-30 confirmed the IP remained cloud-based with no service banners. Geo validation attempts consistently encountered ICMP blocking, unable to validate RTT metrics, though minimum possible RTT calculations indicated 151.6 ms.
Neighborhood Analysis
The /24 subnet 165.232.190.130/24 maintains a clean classification with zero abuse density. Two neighboring IPs were identified (165.232.190.198 and 165.232.190.210), both displaying identical low-risk profiles with risk scores of 25 and authority scores of 50. No threat siblings were detected within the neighborhood.
Relationships
Five relationship entries were returned, all linking to the same network identifier DIGITALOCEAN-165-232-32-0, confirming the IP's placement within the broader DigitalOcean cloud infrastructure.
Recommended Actions
No specific firewall rules or remediation actions are recommended at this time. The IP's low-risk profile and lack of threat indicators suggest standard cloud compute traffic handling is appropriate. Monitoring should continue for any behavioral changes.
Conclusion
IP 165.232.190.130 presents as benign cloud infrastructure with no malicious activity detected. The IP's placement in a clean neighborhood with low-risk siblings and minimal control plane anomalies supports continued classification as low-risk. No immediate defensive action is required beyond standard network hygiene practices.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-165-232-32-0 |
| CIDR Block | 165.232.32.0/19 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-28 04:02:38 UTC |
| Last Seen | 2026-08-12 22:09:07 UTC |
| Profile Built | 2026-08-12 22:17:54 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 18 |
Full dossier details are available via our API.