165.232.79.180
INTELLIGENCE BRIEFING: 165.232.79.180
Classification: Low Risk / Cloud Infrastructure
Report Date: August 13, 2026
Risk Score: 25/100 (Low Risk)
Overview
165.232.79.180 is a cloud compute endpoint operated by DigitalOcean, LLC (ASN 14061). The IP belongs to the DIGITALOCEAN-165-232-32-0 CIDR block (165.232.32.0/19), registered with ARIN. Infrastructure classification indicates cloud hosting with no active services exposed; the endpoint is firewalled with no open ports detected.
Threat Assessment
Current threat indicators show minimal risk. The IP is not flagged as a known attacker, Tor exit node, or spam source. Blacklist enumeration revealed 0 general blacklist entries, though 1 of 8 DNSBL lists returned high-severity listings. Abuse confidence score is null. No active threat campaigns or correlated malicious activity detected. Operator score is 0.1304 (labeled "Minimal").
Network Context
The /24 neighborhood (165.232.79.0/24) demonstrates low abuse density (0.3333) with a "mostly_clean" classification. Three sibling IPs identified:
- 165.232.79.146: Risk score 0 (low risk)
- 165.232.79.154: Risk score 25 (low risk)
No high-risk neighbors detected in immediate subnet.
Observation History
Historical data from August 2026 shows consistent low-risk behavior. Traceroute attempts from August 6 did not reach the target (30 hops, 18 timed out), with final hop through Comcast networks. ICMP probes were blocked, preventing geolocation validation. The single DNSBL listing with high severity represents a minor reputation concern but does not correlate with active malicious campaigns.
Technical Details
- ASN: 14061 (DigitalOcean, LLC)
- Network: 165.232.32.0/19
- Geolocation: United States (Elmenhorst/Lichtenhagen)
- Infrastructure: Cloud Compute
- Services: None (Firewalled)
- DNS: No PTR records, no forward resolution
- Email: No SPF, DMARC, or TXT records configured
- Traceroute: 30 hops, final hop via Comcast
Recommendations
Standard monitoring applies. No immediate blocking required. The IP presents minimal threat to network security. SOC analysts may observe the DNSBL listing for context, but the overall profile indicates benign cloud infrastructure usage.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-165-232-32-0 |
| CIDR Block | 165.232.32.0/19 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-30 11:03:21 UTC |
| Last Seen | 2026-08-13 00:35:06 UTC |
| Profile Built | 2026-08-13 01:18:39 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.