167.71.161.225
## IP Intelligence Briefing: 167.71.161.225/32
Classification: LOW RISK — Cloud Infrastructure Web Server
Subject: 167.71.161.225/32
Owner: DigitalOcean, LLC (ASN 14061)
Network: DIGITALOCEAN-167-71-0-0 (167.71.0.0/16)
Location: Clifton, New Jersey, US (40.06, -74.41)
Risk Assessment
Current risk score: 20 (Low). No blacklist listings, no known threat indicators, and no active campaign associations identified. Abuse confidence score: null. Operator classification: Minimal.
Infrastructure Profile
The IP operates as a cloud compute web server within DigitalOcean infrastructure. Open services include HTTP (80), HTTPS (443), and SSH (22). Server banner indicates Caddy web server software. DNS resolution is not confirmed; no PTR records exist. The IP is not associated with proxy, CDN, VPN, Tor, or mobile carrier infrastructure.
Neighborhood Analysis
The /24 subnet (167.71.161.0/24) shows clean classification with zero abuse density. No neighboring IPs flagged as threat siblings. This indicates the IP is hosted in isolation from other compromised addresses.
Observation History
Twenty-four signals observed, with the most recent activity dated 2026-08-13. Subnet classification was recorded as "mostly_clean" with one threat sibling observed during that window. Geolocation tracing showed transit through New York (JFK area) via Cogent Communications. No persistent malicious behavior detected over the observation period.
Threat Indicators
- Blacklist count: 0
- Tor exit node: No
- Known attacker: No
- Spam source: No
- Known campaigns: None
Control Plane Data
Route stability: False. RPKI state and IRR consistency data not available. DNSSEC validation confirmed.
Recommended Actions
No specific firewall or blocking rules recommended. The IP presents as legitimate cloud infrastructure with no elevated threat indicators. Standard monitoring for web server traffic is appropriate.
---
Analyst Note: This IP represents typical cloud hosting infrastructure. No immediate threat mitigation required. Monitor for changes in behavior or neighborhood activity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-167-71-0-0 |
| CIDR Block | 167.71.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Caddy |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.7p1 Ubuntu-7ubuntu4.3 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 40% | 2 | 3 |
| ownership | 38% | 2 | 4 |
| reputation | 32% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 33% | 10 | 17 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-03 17:30:17 UTC |
| Last Seen | 2026-08-13 05:11:14 UTC |
| Profile Built | 2026-08-13 05:33:21 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 25 |
Full dossier details are available via our API.