64.227.13.54
IP Intelligence Briefing: 64.227.13.54
*Generated via IPDebrief Tools*
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Provider: DigitalOcean (ASN 14061)
- Geolocation: New Jersey, US (North Bergen, 39.83°N, -98.58°W)
- Network Role: Cloud compute instance (DigitalOcean infrastructure)
- Services: SSH open on port 22; no other services detected.
- Threat Indicators: Clean (no malware, phishing, or exploit indicators).
---
**2. Observation History**
- Recent Activity:
- Scanned on May 24, 2026 (ports 22, 80, 443, etc.).
- Geolocation confirmed as New Jersey, US.
- No persistent malicious behavior or campaign ties.
- Stability: Stable BGP routes (no route changes in 30 days).
---
**3. Relationships**
- Linked Entities:
- Same network: `DIGITALOCEAN-64-227-0-0` (64.227.0.0/17).
- No DNS, hostname, or certificate relationships detected.
---
**4. Neighborhood Analysis**
- Subnet: 64.227.13.54/24
- Abuse Density: 0% (no malicious neighbors detected).
- Active Siblings: 0 (no other IPs in the subnet observed).
---
**5. Recommended Actions**
- Firewall Rules:
- iptables: `iptables -A INPUT -s 64.227.13.54 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 64.227.13.54 drop`
- Cloudflare WAF: Block IP with description "IPDebrief risk 50".
- Monitoring: Continuously track SSH activity and network traffic.
---
**6. Summary**
The IP 64.227.13.54 is a legitimate DigitalOcean cloud instance with no current threat indicators. While its risk score is moderate, the lack of malicious activity and stable network behavior suggest it is not actively malicious. However, given its cloud infrastructure and open SSH port, proactive monitoring and firewall blocking are recommended to mitigate potential compromise risks. No related IPs in the subnet show abuse, but vigilance is advised.
*End of Briefing*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | — |
| CIDR Block | 64.227.0.0/20 |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 4 |
| routing | 17% | 2 | 3 |
| services | 21% | 2 | 2 |
| ownership | 22% | 3 | 4 |
| reputation | 28% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 25% | 12 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-21 21:01:13 UTC |
| Last Seen | 2026-06-28 16:52:01 UTC |
| Profile Built | 2026-06-29 04:57:03 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.