167.71.210.152📋 Copy

IP INTELLIGENCE BRIEFING: 167.71.210.152/32

SUMMARY

IP address 167.71.210.152 is a DigitalOcean cloud compute instance with moderate risk classification (risk score 40). The IP operates within the 167.71.0.0/16 CIDR block under ASN 14061. No active threat indicators were identified, and the IP shows no evidence of persistent malicious activity.

OWNERSHIP & GEOLOCATION

• Organization: DigitalOcean, LLC
• ASN: 14061
• CIDR: 167.71.0.0/16
• Registered Network: DIGITALOCEAN-167-71-0-0
• Geolocation: Singapore (SG) per consensus data, though historical signals showed conflicting US-based coordinates (Colorado, 39.83, -98.58) with low confidence (0.35). Geo validation flagged as implausible.
• Network Role: CloudCompute infrastructure, isHosting flag set to true

THREAT ASSESSMENT

• Risk Score: 40 (Moderate Risk)
• Abuse Confidence: Not applicable
• Blacklist Status: Listed on 2 of 8 DNSBLs
• Threat Indicators: None detected
• Known Campaigns: None correlated
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

NETWORK CHARACTERISTICS

• Open Ports: None detected
• DNS Resolution: No PTR hostnames, no forward resolution
• HTTP/TLS Services: No services detected
• Control Plane: Route changes observed within last 30 days; isRouteStable: false
• Operator Score: 0.1304 (Minimal)

NEIGHBORHOOD ANALYSIS

• Subnet: 167.210.152/24
• Abuse Density: 0 (Clean)
• Subnet Classification: Clean
• Active Siblings: 1
• Threat Siblings: 0
• Neighbor IP: 167.71.210.40 (risk score 25, authority score 50, low risk)

OBSERVATION HISTORY

13 historical observations recorded. Most recent signals (August 2026) indicate no ownership changes and clean subnet classification. Threat observation count remains at zero throughout the observation period.

RELATIONSHIPS

Minimal relationship graph. Two relationships identified, both pointing to same network: DIGITALOCEAN-167-71-0-0. No connections to hostnames, organizations, or certificates.

RECOMMENDATIONS

No immediate firewall or blocking actions recommended. IP is a legitimate cloud infrastructure instance with no active threat indicators. Monitor for service activation or reputation changes if this IP appears in traffic logs.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.