167.172.58.66
INTELLIGENCE BRIEFING: 167.172.58.66/32
Classification: Moderate Risk (Score: 40)
Asset Type: Cloud Compute Infrastructure
Provider: DigitalOcean (ASN: 14061)
Geolocation: Slough, England, GB
Executive Summary
The target IP 167.172.58.66 is a DigitalOcean cloud compute instance with moderate risk classification. The IP demonstrates inconsistent geolocation reporting and has been observed on DNS blacklists despite no active threat indicators currently associated with the address.
Network Characteristics
- Infrastructure: Cloud-based compute instance (DigitalOcean)
- Services: No open ports detected; classified as "Firewalled / No Services"
- Route Stability: Unstable routing observed (isRouteStable: false)
- BGP Prefix: 167.172.48.0/20
- DNSBL Status: Listed on 2 of 8 total DNS blacklists
Threat Indicators
- No active threat feeds or campaign correlations detected
- No known attacker reputation or Tor exit node activity
- No evidence of spam source activity
- ISP/Provider scores indicate minimal operator risk (0.1304)
- DNSSEC validation: Valid
Temporal Analysis
Observation history reveals location inconsistency: geolocation was reported as Newark, US on 2026-08-05, with current reporting showing Slough, England. Recent listing activity observed on 2026-08-12 with high severity classification across multiple sources. Historical subnet analysis (167.172.58.0/24) showed clean classification with 0 abuse density as of 2026-08-05.
Neighborhood Assessment
Subnet 167.172.58.0/24 demonstrates low threat density:
- Total siblings: 2
- Active siblings: 2
- Threat siblings: 0
- Neighbor IP (167.172.58.162) shows moderate risk score of 30
Recommended Actions
Based on the risk profile, defensive measures include:
- Block traffic at perimeter firewall (iptables, nftables, pfSense)
- Apply deny rules at application layer (nginx, Cloudflare WAF, AWS WAF)
- Monitor for changes in geolocation reporting and DNSBL status
Assessment Notes
This IP represents a cloud infrastructure asset with moderate risk due to DNSBL listings and routing instability. No active threat indicators were observed, but the location inconsistencies and blacklist presence warrant continued monitoring. No immediate blocking is required unless additional contextual threat intelligence emerges.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | digitalocean |
| ASN | AS14061 |
| Network Name | DigitalOcean |
| CIDR Block | 167.172.0.0/16 |
| RIR | ARIN |
| Country | US |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-29 10:33:34 UTC |
| Last Seen | 2026-08-12 23:20:12 UTC |
| Profile Built | 2026-08-12 23:27:48 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.