# IP Intelligence Briefing: 170.64.168.145
## Executive Summary
IP 170.64.168.145 is a DigitalOcean cloud infrastructure endpoint located in Sydney, Australia with a moderate risk profile (score: 65). The IP hosts services on ports 22 (SSH) and 8443 (HTTPS-alt) with a TLS certificate identifying it as "takserver" under the PrivateTAK organization. While the immediate threat indicators are minimal, the IP shows 3 DNSBL listings, warranting continued monitoring.
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 65 (Moderate) |
| **ASN** | AS14061 (DigitalOcean, LLC) |
| **Network** | DIGITALOCEAN-170-64-128-0/17 |
| **Geolocation** | Sydney, New South Wales, AU |
| **Infrastructure Type** | Cloud Compute |
| **Open Ports** | 22/TCP (SSH), 8443/TCP (HTTPS-alt) |
## Threat Indicators
- DNSBL Status: Listed on 3 of 8 total blacklists
- Abuse Confidence: Not explicitly scored
- Known Campaigns: None detected
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
## Neighborhood Context
Subnet 170.64.168.0/24 classification: Clean
- Abuse Density: 0%
- Threat Siblings: 0
- No neighboring IP risk indicators detected
## Historical Trend Analysis
19 signal observations recorded. Recent activity (2026-08-13) shows minimal threat indicators with operator score of 0.1304. Historical data reveals occasional geolocation inconsistencies (one probe detected US coordinates), but subnet-level abuse density has remained at zero across all observations. No persistent malicious behavior detected.
## Relationship Mapping
IP exhibits relationships only to its parent DigitalOcean network (DIGITALOCEAN-170-64-128-0). No external entity links (organizations, hostnames, certificates beyond the TLS cert) detected.
## Recommended Actions
- Monitor: Continue monitoring for escalation in DNSBL listings or risk score changes
- Contextualize: Verify if traffic correlates with Tarkov game server operations (TLS cert: CN=takserver)
- Threshold: Investigate if risk score exceeds 75 or if additional threat indicators emerge
- No Immediate Block: Current profile does not warrant blocking; moderate risk requires continued observation
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-170-64-128-0 |
| CIDR Block | 170.64.128.0/17 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| 8443 | https-alt | tcp | β |
| Closed Ports | 25, 80, 443, 3389, 8080 (2 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
π TLS Certificate
| SANs | takserver |
| Valid From | 2026-06-05T09:54:47+00:00 |
| Valid Until | 2028-06-04T09:54:47+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 730 days |
| Serial Number | 00C83FE27BE27C502B |
| Thumbprint | 0438DFB1B4B771D7C60858E00E6C847BD57AB0F0 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 24% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-05 18:27:56 UTC |
| Last Seen | 2026-08-13 07:59:07 UTC |
| Profile Built | 2026-08-13 08:12:45 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 23 |
Full dossier details are available via our API.