IPDebrief

64.226.72.196

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IPDEBRIEF THREAT INTELLIGENCE BRIEFING

Target: 64.226.72.196/32

Date: 2026-07-29

Classification: LOW RISK

---

## EXECUTIVE SUMMARY

IP 64.226.72.196 is a DigitalOcean cloud infrastructure address with a low-risk reputation profile. No malicious indicators, blacklist listings, or threat campaigns detected. Recommended monitoring level: Standard. No immediate firewall blocking required.

---

## INFRASTRUCTURE PROFILE

AttributeValue
**Organization**DigitalOcean
**ASN**14061
**BGP Prefix**64.226.64.0/20
**Location**Frankfurt am Main, Hesse, DE
**Infrastructure Type**Cloud Provider
**Service Purpose**Firewalled / No Services

---

## THREAT ASSESSMENT

Risk Score: 0 (Low Risk)

Abuse Confidence: Not Applicable

Blacklist Status: Clean (0 listings)

Known Campaigns: None

Threat Indicators:

Network Role:

---

## SERVICE & PORT ANALYSIS

---

## OBSERVATION HISTORY

Total Observations: 10

Observation Window: Recent (2026-07-29)

Signal Trends:

---

## NEIGHBORHOOD ANALYSIS

Subnet: 64.226.72.0/24

Abuse Density: 0 (Clean)

Threat Siblings: 0

Active Siblings: 0

No malicious activity detected in immediate /24 neighborhood.

---

## RELATIONSHIP GRAPH

No related entities discovered (no associated hostnames, organizations, or certificates).

---

## RECOMMENDED ACTIONS

Security Posture: No action required

Firewall Rules: None recommended

Monitoring Level: Standard network traffic monitoring

Note: IP classified as cloud infrastructure with no exposed services. Traffic patterns should be evaluated based on legitimate DigitalOcean customer usage profiles.

---

## ANALYST NOTES

This IP represents routine DigitalOcean cloud infrastructure. The lack of open ports, clean reputation, and absence of threat indicators suggest benign cloud hosting. No correlation with known malicious campaigns or attacker infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
RegionHesse
CityFrankfurt am Main
TimezoneEurope/Berlin
Latitude50.12
Longitude8.68

๐Ÿข Ownership & Registration

OrganizationDigitalOcean, LLC
ASNAS14061
Network NameDIGITALOCEAN-64-226-64-0
CIDR Block64.226.64.0/18
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score40% (Fair)
SPFPresent
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting โ€” Infrastructure provider without advanced routing
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Servernginx/1.24.0 (Ubuntu)
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18

๐Ÿ” TLS Certificate

๐Ÿ”’
CN=trade.ebull.io
Issued by CN=YE1, O=Let's Encrypt, C=US
Self-signed: No
SANstrade.ebull.io
Valid From2026-07-29T07:47:20+00:00
Valid Until2026-10-27T07:47:19+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha384ECDSA
Validity Period89 days
Serial Number050EE2730A61BC3FB0C876AAA328029EB1BF
ThumbprintFBE3CDF0EB68CCDD983AB4A419F8486377F82B92

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
36%
24
routing
13%
11
services
35%
24
ownership
30%
23
reputation
28%
13
geolocation
35%
23
Overall29%1018
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-22 07:16:30 UTC
Last Seen2026-08-12 16:45:17 UTC
Profile Built2026-08-12 16:59:02 UTC
Data FreshnessLive
Signal Types22
Total Observations23
๐Ÿ” 22 signal types ยท 23 observations collected
This report is generated from 22+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.