24.199.98.229
## IP Intelligence Briefing: 24.199.98.229/32
Classification: Low Risk | Date: Current Analysis
Executive Summary
IP address 24.199.98.229 is a DigitalOcean cloud infrastructure endpoint with a risk score of 25. The IP operates within a clean subnet with zero abuse density and no active threat siblings. Historical observations show minimal operational signals with no persistent malicious behavior detected.
Technical Profile
- Organization: DigitalOcean, LLC (ASN 14061)
- Network Block: 24.199.64.0/18 (DIGITALOCEAN-24-199-64-0)
- Location: Santa Clara, California, US
- Infrastructure Type: Cloud Compute (Hosted Environment)
- DNSSEC Status: Valid
- Control Plane: Route stable (0 changes in 30 days), RPKI state not determined
Threat Indicators
- Blacklist Status: Not listed (0 blacklist entries)
- Threat Feeds: No active threat indicators
- Known Campaigns: None identified
- Abuse Confidence Score: Not scored
- Open Ports: None detected
- Active Services: No open services identified
- TLS Certificates: None detected
Network Context
The IP resides in a /24 subnet with an abuse density score of 0. All 24-bit neighbors classified as low risk/clean. No high-risk or medium-risk adjacent IPs detected. This indicates the IP is not part of a coordinated attack infrastructure.
Historical Activity (21 Observations)
Recent signal history (most recent: 2026-08-12) shows:
- Operator score: Minimal (0.1304)
- Subnet classification consistently "clean"
- One historical signal (2026-08-05) referenced 8 blacklist listings with 1 listing active and maximum severity "high" — current status shows no active listings
- No threat persistence detected
- No correlated IPs or campaign matches
Relationship Analysis
- Network Affiliation: DIGITALOCEAN-24-199-64-0 network
- External Relationships: No external entity relationships (hostnames, organizations, certificates) detected beyond network-level association
- Subnet Classification: Clean with inherited risk score of 0
Operational Assessment
This IP exhibits characteristics of legitimate cloud infrastructure with no active threat signals. The cloud hosting designation and Santa Clara location align with DigitalOcean's standard infrastructure deployment. The absence of open ports and active services suggests the endpoint may be:
1. Network-scoped or internal to DigitalOcean's infrastructure
2. Provisioned but not currently active
3. Protected by upstream firewall rules
Recommendations
- Monitoring: Continue passive monitoring; no immediate blocking required
- Firewall Rules: No specific firewall rules recommended (risk score below threshold for automated blocking)
- Investigation Priority: Low
- Context: If this IP appears in security logs, treat as benign cloud infrastructure unless additional threat indicators emerge
---
Analysis Notes: All data sourced from IPDebrief intelligence platform. Risk assessment based on current signal observations and historical patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-24-199-64-0 |
| CIDR Block | 24.199.64.0/18 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS14061 |
| Network Prefix | 24.199.96.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 30% | 2 | 3 |
| Overall | 19% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 01:19:37 UTC |
| Last Seen | 2026-08-26 17:57:49 UTC |
| Profile Built | 2026-08-29 07:44:57 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 24.199.98.229
Who owns the IP address 24.199.98.229?
24.199.98.229 is registered to DigitalOcean, LLC. The address falls within the 24.199.64.0/18 network block. Registration is held at ARIN.
Where is 24.199.98.229 located?
Geolocation data places 24.199.98.229 in Santa Clara, California, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 24.199.98.229 malicious or safe?
24.199.98.229 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 24.199.98.229?
Responsive ports observed on 24.199.98.229 include 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.
Is 24.199.98.229 a VPN, proxy, or data center address?
24.199.98.229 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.