161.35.237.29
IP Intelligence Dossier
Your IP: 216.73.216.5
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
INTELLECTUAL BRIEFING: 161.35.237.29
Classification: Low Risk | Last Updated: 2026-08-12
---
OWNERSHIP & INFRASTRUCTURE
- Organization: DigitalOcean, LLC (AS14061)
- Network: DIGITALOCEAN-161-35-0-0 (161.35.0.0/16)
- Geolocation: Santa Clara, CA, US
- Infrastructure Type: Cloud Computing (hosting environment)
- Risk Score: 25/100 (Low Risk)
NETWORK SERVICES & FINGERPRINT
- Open Ports: 80 (HTTP), 443 (HTTPS), 22 (SSH)
- Web Server: nginx/1.24.0 (Ubuntu)
- TLS Certificate: ZeroSSL ECC DV SSL CA
- Certificate Subject: gs-classic-svjpvqpxqo1yalnwlvxkr-0.bloxd.io
- HTTP Headers: Content Security Policy (default-src 'none'), X-Content-Type-Options: nosniff
- Email Authentication: SPF and DMARC records present
THREAT INDICATORS
- Abuse Confidence: None
- Blacklist Status: Listed on 8 DNSBLs (1 high-severity listing)
- Known Campaigns: None detected
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
SUBNET CONTEXT
- Subnet Abuse Density: 0 (mostly_clean)
- Neighbor Risk Distribution: No high/medium risk neighbors identified
- Inherited Risk: 2
OBSERVATION HISTORY
- Total Observations: 26 signals
- Recent Activity: 2026-08-12
- DNSBL Listings: 8 total (1 high-severity)
- Threat Persistence: 0 days
- Ownership Stability: No ownership changes recorded
RELATIONSHIP GRAPH
- Primary associations: DIGITALOCEAN-161-35-0-0 network
- No external hostname or certificate correlations beyond TLS certificate
---
ANALYST NOTES
This IP represents a standard DigitalOcean cloud hosting environment. The presence of CSP headers and email authentication records indicates reasonable security posture. The single high-severity DNSBL listing warrants monitoring but does not indicate active malicious behavior. The subnet shows minimal abuse density and no correlated threat activity. Recommended action: Monitor for changes in blacklist status; no immediate blocking required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-161-35-0-0 |
| CIDR Block | 161.35.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.24.0 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
CN=gs-classic-svjpvqpxqo1yalnwlvxkr-0.bloxd.io
Issued by CN=ZeroSSL ECC DV SSL CA 2, O=ZeroSSL GmbH, C=AT
Self-signed: No
| SANs | gs-classic-svjpvqpxqo1yalnwlvxkr-0.bloxd.io |
| Valid From | 2026-07-22T00:00:00+00:00 |
| Valid Until | 2026-10-20T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256ECDSA |
| Validity Period | 90 days |
| Serial Number | 62C884C8B1FEA0974713A14C5807D697 |
| Thumbprint | 904A01B3BD7FC9893A5FA2A19C43594C78C203F3 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 32% | 2 | 3 |
| ownership | 35% | 2 | 4 |
| reputation | 28% | 1 | 3 |
| geolocation | 32% | 2 | 3 |
| Overall | 29% | 10 | 17 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Claimed geolocation contradicts RTT physics measurement
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-22 01:11:14 UTC |
| Last Seen | 2026-08-12 16:32:43 UTC |
| Profile Built | 2026-08-12 16:48:49 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
🔍 22 signal types · 24 observations collected
This report is generated from 22+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.