IPDebrief

198.199.90.202

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 198.199.90.202/32

Classification: Low Risk | Risk Score: 25 | Provider: DigitalOcean, LLC

## Executive Summary

IP 198.199.90.202 is a cloud-compute host registered to DigitalOcean (ASN 14061), located in North Bergen, NJ. The asset presents a low-risk profile (score 25) with no active threat indicators. However, geolocation validation anomalies and historical HTTP 500 errors warrant monitoring.

## Technical Profile

AttributeValue
**Organization**DigitalOcean, LLC (ASN 14061)
**Infrastructure Type**Cloud Compute / Hosting
**Geolocation**US (NJ, North Bergen) - *Validation Issue*
**Open Ports**80/tcp (HTTP), 443/tcp (HTTPS), 22/tcp (SSH)
**Web Server**nginx/1.18.0 (Ubuntu)
**TLS Certificate**Let's Encrypt (CN=mamura.ptsystems.net)
**DNSBL Listings**1 of 8 total lists

## Threat Indicators

## Geolocation Anomaly

Geolocation validation indicates a significant discrepancy: the IP claims to be in North Bergen, NJ (~40.7964° N, -74.0203° W), but RTT measurements (23ms) are inconsistent with the claimed distance of 5963km (minimum possible RTT should be ~119ms). This suggests either:

## Network Context

Subnet Analysis (198.199.90.0/24):

Network Relationships:

The IP belongs to DigitalOcean's 198.199.64.0/10 address block. No malicious relationships detected with other entities.

## Historical Observations

Timeline: 23 total observations

## SOC Actionable Recommendations

PriorityActionJustification
**Monitor**Continue standard traffic monitoringLow risk score, no active threats
**Investigate**Review HTTP 500 errors for application issuesIndicates service instability, potential abuse vector
**Verify**Confirm geolocation accuracy if criticalRTT/Distance mismatch suggests data integrity issue
**Block**No immediate action requiredNo actionable threats identified

## Conclusion

IP 198.199.90.202 is a legitimate DigitalOcean cloud-hosted web server with low-risk characteristics. The primary concern is geolocation validation inconsistency and historical HTTP 500 errors. No immediate threat mitigation required. Include in standard cloud provider monitoring group.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionNJ
CityNorth Bergen
Timezoneβ€”
Latitude40.80
Longitude-74.02

🏒 Ownership & Registration

OrganizationDigitalOcean, LLC
ASNAS14061
Network Nameβ€”
CIDR Blockβ€”
RIRARIN
Countryβ€”
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)

πŸ” DNS Hygiene

Hygiene Score40% (Fair)
SPFPresent
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting β€” Infrastructure provider without advanced routing
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Servernginx/1.18.0 (Ubuntu)
HTTP Titleβ€”
SSH VersionSSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.13

πŸ” TLS Certificate

πŸ”’
CN=mamura.ptsystems.net
Issued by CN=R12, O=Let's Encrypt, C=US
Self-signed: No
SANsmamura.ptsystems.net
Valid From2026-04-17T09:24:54+00:00
Valid Until2026-07-16T09:24:53+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period89 days
Serial Number0675DDD6C4B709481C4BDE40D624EA78292D
Thumbprint2A0D283E059F968D76566DE3A8FDE5E8C085258E

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
27%
24
routing
8%
11
services
30%
23
ownership
24%
23
reputation
26%
13
geolocation
33%
23
Overall25%1017
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-20 22:12:44 UTC
Last Seen2026-06-28 12:38:15 UTC
Profile Built2026-06-29 06:42:38 UTC
Data FreshnessLive
Signal Types21
Total Observations24
πŸ” 21 signal types Β· 24 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.