IP cleanliness report

5.22.215.168

Multi-source IP cleanliness, network ownership, and risk signals.

Checked:2026-10-15 14:08:14 Upcloud Ltd · AS202053 Germany · Frankfurt am Main · Medium confidence
42
REPUTATION
Higher scores mean fewer current risk signals
01 · Executive finding

Multiple risk signals

Signals requiring review are present. Check the evidence before important use and retest after changing routes.

欺诈或攻击风险偏高Critical ports
Checked2026-10-15 14:08:14 Score scale0–100 Data coverage16 data sources
02 · Key findings

Risk and clear signals

Review signals that need attention first, followed by key clear findings; only decision-useful evidence is shown here.

Key evidence is ordered by impact; the complete scoring ledger can be expanded in Score composition below.
Needs attention4
IP TypeCloud/VPS Datacenter (UPCLOUD) (3 consistent type signals) 15 / 40
Scamalytics ScoreMedium(49) ⚠️ 1 / 5
proxycheck RiskReview(Risk=33) ⚠️ 3 / 5
Port ExposureSensitive ports 5900, 5901, 6379, 9200, 11211 ❌ 0 / 2
Key passed checks5
BGP RouteAnnounced and visible ✅ 2 / 2
Bot DetectionNot bot ✅ 1 / 1
Proxy Detection3 pass ✅ 7 / 7
Tor DetectionNot Tor ✅ 5 / 5
VPN Detection2 pass ✅ 8 / 8
03 · Score composition

How the score was calculated

Shows the base score, risk deductions, clean confirmation, and final score; the full scoring ledger stays collapsed until needed.

Base56
Deductions-13.8
Clean confirmation0
Final42
Risk-signal deductionsElevated fraud or attack risk · Critical ports-13.8
IP TypeCloud/VPS Datacenter (UPCLOUD) (3 consistent type signals)15 / 40
Scamalytics ScoreMedium(49) ⚠️1 / 5
proxycheck RiskReview(Risk=33) ⚠️3 / 5
Port ExposureSensitive ports 5900, 5901, 6379, 9200, 11211 ❌0 / 2
All score checksSources 16/16 · Ceiling 45
Deduction:Elevated fraud or attack riskDeducted directly from the base scoreDeducted-3.8
Deduction:Critical portsDeducted directly from the base scoreDeducted-10
IP TypeCloud/VPS Datacenter (UPCLOUD) (3 consistent type signals)Risk15 / 40
VPN Detection2 pass ✅Pass8 / 8
Proxy Detection3 pass ✅Pass7 / 7
Tor DetectionNot Tor ✅Pass5 / 5
Scamalytics ScoreMedium(49) ⚠️Review1 / 5
proxycheck RiskReview(Risk=33) ⚠️Review3 / 5
Abuse HistoryNo match—
IPsum threat intelligenceNo match—
Feodo TrackerNo match—
Spamhaus DROPNo match—
DShieldNo match—
Threat-feed consensusNo multi-source confirmationNo match—
BGP RouteAnnounced and visible ✅Pass2 / 2
Port ExposureSensitive ports 5900, 5901, 6379, 9200, 11211 ❌Risk0 / 2
Subnet QualityNo reliable neighbor dataNo match—
Bot DetectionNot bot ✅Pass1 / 1
04 · Network profile

Network identity and location

All geolocation fields remain visible; confidence represents source agreement, not GPS-level physical accuracy.

IP Type Datacenter / Hosting
Proxy Status No Proxy Detected
Network Upcloud Ltd (AS202053)
Location DE · Hessen · Frankfurt am Main (Medium confidence)
Location typeHosting/datacenter location5 geolocation sources returned
Country / regionHigh confidence
Germany (DE)4/4 available sources agree
State / provinceMedium confidence
Hessen2/5 available sources agree
City estimateMedium confidence
Frankfurt am Main5/5 available sources agree
Postal codeLow confidence
659311/3 available sources agree
TimezoneHigh confidence
Europe/Berlin5/5 available sources agree
Reference coordinatesMedium confidence
50.11, 8.685/5 available sources agree · coordinate spread about 0 km
View all geolocation sources5
SourceCountryRegionCityCoordinatesTimezone
IPinfoDEHesseFrankfurt am Main50.12, 8.68Europe/Berlin
IP2LocationDEHessenFrankfurt am Main50.11, 8.68Europe/Berlin
ipapi.comDEHessenFrankfurt Am Main50.11, 8.68Europe/Berlin
proxycheck.ioDEHesseFrankfurt am Main50.11, 8.68Europe/Berlin
ipapi.isGermanyHesseFrankfurt am Main50.11, 8.68Europe/Berlin
05 · Data sources

Source coverage and completion

Lists each source used in this check and its completion state by role; scoring evidence and individual matches remain in the scoring and evidence sections.

Complete16
Not applicable0
Unavailable0
Sources16

Registry1

RIR RDAPComplete

Network identity3

IPinfoComplete
IP2LocationComplete
ipapi.isComplete

Routing and ASN2

RIPEstatComplete
Team CymruComplete

Proxy and reputation3

proxycheck.ioComplete
ipapi.comComplete
ScamalyticsComplete

Threat intelligence6

Spamhaus DROPComplete
IPsumComplete
Feodo TrackerComplete
Tor ProjectComplete
DShieldComplete
Blocklist.deComplete

Internet exposure1

Shodan InternetDBComplete
06 · Report appendix

Report methodology and field snapshot

ScoringFixed-weight aggregation with separate risk deductions
GeolocationDatabase consensus, not the device’s physical location
Snapshot time2026-10-15 14:08:14
06.1 · Report field snapshot
FieldValue
IP Address5.22.215.168
Reputation Score42/100
Cleanliness LevelMultiple signals
IP TypeDatacenter / Hosting
CountryGermany
State / provinceHessen
City estimateFrankfurt am Main · Medium confidence · 5/5 available sources agree
Postal code65931
TimezoneEurope/Berlin
Reference coordinates50.11, 8.68
ISPUpcloud Ltd
ASNAS202053
Proxy/VPNNo
Proxy TypeNone
Datacenter IPYes
Tags欺诈或攻击风险偏高, Critical ports
Last Checked2026-10-15 14:08:14
06.2 · Scoring and interpretation
What does the score for 5.22.215.168 mean?

A score of 42/100 means several sources returned signals requiring attention. Exact labels, check time, and original sources are listed in the report.

What type of IP is this?

5.22.215.168 is a datacenter IP on Upcloud Ltd (AS202053) in DE Frankfurt am Main.

How is the cleanliness score calculated?

The system queries 16 data sources covering proxy/VPN classification, malicious ranges, threat intelligence, ASN, and port exposure. Evidence is combined with fixed weights into a 0-100 score and is generated only when completeness requirements are met.

What score is safe?

There is no universal safe score for every website. IPRisk summarizes proxy, blacklist, network-type, and threat-intelligence signals; each service has its own rules and may use data not shown here.

06.3 · Related samples on the same ASN

This IP returned multiple risk signals. After changing the exit, return to the IP cleanliness check to retest it, then use the Environment Scan to confirm browser routing consistency.

Check another IP Check browser routes