IP INTELLIGENCE BRIEFING
Target: 167.172.59.128/32
Generated: 2026-08-12
---
Executive Summary
IP 167.172.59.128 is a DigitalOcean cloud infrastructure address hosted in Slough, England (GB). Current risk assessment indicates Low Risk status with a risk score of 25. No active threat indicators or known malicious campaigns detected. The IP operates in a clean subnet environment with minimal abuse density.
---
Technical Profile
| Attribute | Value |
|---|---|
| **ASN** | 14061 (DigitalOcean) |
| **Organization** | DigitalOcean |
| **Country** | United Kingdom (GB) |
| **Location** | Slough, England |
| **Infrastructure** | CloudCompute |
| **Network Role** | Firewalled / No Services |
| **Risk Score** | 25 / 100 (Low) |
| **Abuse Confidence** | Not Available |
| **Blacklist Status** | 0 entries |
---
Threat Indicators
- Active Threats: None detected
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Proxy/VPN: False
- Known Campaigns: None
- Threat Feed Matches: None
---
Neighborhood Analysis
The IP resides in subnet 167.172.59.0/24 with the following characteristics:
- Abuse Density: 0.0 (Low)
- Classification: Mostly Clean
- Total Siblings: 2
- Active Threat Siblings: 1
- Adjacent IP: 167.172.59.75 (Risk Score: 25, Authority Score: 50)
---
Historical Observation Summary
Twenty observations recorded. Key findings:
- Recent Signals: Multiple blacklist references (8 total lists, 1 currently active with high severity)
- Geolocation: Consistently resolves to GB/England region
- Network Validation: ICMP blocked โ geolocation validated via multi-signal inference
- Operator Score: 0.1304 (Minimal operator score)
---
Recommended Actions
1. Monitoring: Continue standard traffic monitoring. No immediate blocking required.
2. Traffic Analysis: Monitor for any changes in connection patterns or service emergence.
3. Subnet Context: Review adjacent IP 167.172.59.75 for coordinated activity assessment.
4. Alert Thresholds: Current risk level supports baseline logging without elevated alerting.
---
Conclusion
IP 167.172.59.128 represents legitimate cloud infrastructure with no active threat posture. The IP is not associated with known malicious activity, campaigns, or infrastructure abuse. Standard security monitoring practices are appropriate.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | digitalocean |
| ASN | AS14061 |
| Network Name | DigitalOcean |
| CIDR Block | 167.172.0.0/16 |
| RIR | ARIN |
| Country | US |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 20% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-26 03:08:38 UTC |
| Last Seen | 2026-08-12 20:07:18 UTC |
| Profile Built | 2026-08-12 20:15:41 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 21 |
Full dossier details are available via our API.