168.144.105.169

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Narrative

The IP address 168.144.105.169 is associated with DigitalOcean and has been detected engaging in scanning and enumeration activities, despite no direct attacks being observed. The infrastructure is classified as hosting with no exposed services, and it is flagged as a potential reconnaissance actor.

Classification Tags

HostingSingaporeMedium RiskVery Low Confidence

Signal Summary Table

Category	Finding	Confidence
Geolocation	Singapore (inferred, plausible)	Very Low
Ownership	DigitalOcean, LLC	Low
Infrastructure	Hosting, no exposed services	Low
Threat Lists	Scanning/Enumeration detected	Low
Open Ports	None	Low
Risk Score	50	Low
TLS	No certificates	Low
PTR	Not checked	Low
FCrDNS	None	Low
BGP	Stable route	Low

Notable Findings

⚠️ Warning: The IP has been detected performing enumeration activities, which could indicate reconnaissance.
ℹ️ Info: The IP is hosted by DigitalOcean, a known cloud provider, and is firewalled with no exposed services.
❓ Unknown: Geolocation sources disagree on the exact country, with conflicting reports of US and Singapore.
ℹ️ Info: The infrastructure has a stable route, and the IP is part of a mixed-abuse /24 subnet with one sibling flagged as a threat actor.

Recommended Actions

Block immediately — elevated risk from multiple threat signals.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇸🇬 Singapore
Region	—
City	Singapore
Timezone	Asia/Singapore
Latitude	1.35
Longitude	103.82

🛡️ Platform Security History

Enumeration

Path/resource enumeration

Total events: 12

Observed 2026-05-11 — 2026-05-21

🏢 Ownership & Registration

Organization	DigitalOcean, LLC
ASN	AS14061
Network Name	—
CIDR Block	168.144.96.0/20
RIR	ARIN
Country	—
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	40% (Fair)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Present

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Firewalled / No Services
Network Tier	Tier 3 — Basic operator with some routing infrastructure

Cloud

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	24%	2	4
routing	24%	4	5
services	17%	2	3
ownership	22%	3	4
reputation	28%	1	3
geolocation	28%	2	3
Overall	24%	14	22

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (65%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-05-09 23:50:00 UTC
Last Seen	2026-06-27 16:46:56 UTC
Profile Built	2026-06-28 16:52:34 UTC
Data Freshness	Live
Signal Types	35
Total Observations	41

🔍 35 signal types · 41 observations collected

This report is generated from 35+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

168.144.105.169📋 Copy