165.232.191.199
IP Intelligence Briefing: 165.232.191.199
Classification: Low Risk / Cloud Infrastructure
Executive Summary
IP address 165.232.191.199 operates as a DigitalOcean cloud compute instance with a low-risk profile. No active threat indicators, malicious campaigns, or blacklist associations were identified. The IP resides within a clean subnet showing no inherited risk from neighboring addresses.
Key Profile Data
| Attribute | Value |
|---|---|
| **Risk Score** | 25 (Low) |
| **Organization** | DigitalOcean, LLC (ASN 14061) |
| **Network** | DIGITALOCEAN-165-232-32-0 (165.232.32.0/19) |
| **Location** | Bengaluru, Karnataka, India |
| **Infrastructure** | CloudCompute / Hosting |
| **Blacklist Status** | 0 hits |
| **Known Attacker** | No |
Network Services & Fingerprint
- Open Ports: TCP/80 (HTTP), TCP/22 (SSH)
- Web Server: nginx/1.24.0 (Ubuntu)
- HTTP Status: 404 (Not Found)
- HTTP Version: 1.1
Threat Assessment
- Campaign Association: None detected
- Threat Feeds: No matches
- Tor Exit Node: No
- Proxy/VPN Service: No
- DNSBL Listings: 1 of 8 (minimal operator score 0.13)
- Route Stability: Route changes detected in past 30 days
Subnet Analysis (165.232.191.0/24)
- Abuse Density: 0 (Clean)
- Active Siblings: 2
- Threat Siblings: 0
- Neighboring IP: 165.232.191.119 (Risk Score: 25)
Observation History
Analysis indicates no persistent malicious behavior. The IP has not been observed as a known attacker or spam source. Geolocation validation shows plausible origin from India with an RTT of approximately 242ms average.
Recommended Actions
No immediate blocking or mitigation actions recommended. The IP presents a standard cloud infrastructure profile with no actionable threat intelligence.
Intelligence Context
This IP represents legitimate cloud hosting infrastructure. The presence of a single DNSBL listing and unstable routing are characteristic of cloud environment dynamics rather than malicious activity. No correlation with known threat campaigns or malicious infrastructure was established.
Analyst Notes
- Monitor for changes in threat indicators if associated with suspicious activity
- Standard cloud compute profile with typical egress ports (HTTP/SSH)
- No evidence of abuse or malicious usage patterns observed
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-165-232-32-0 |
| CIDR Block | 165.232.32.0/19 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | nginx/1.24.0 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-10 17:28:23 UTC |
| Last Seen | 2026-09-02 19:34:53 UTC |
| Profile Built | 2026-09-02 19:48:35 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 30 |
Full dossier details are available via our API.