167.71.246.78📋 Copy

# IP Intelligence Briefing: 167.71.246.78

## Executive Summary

IP address 167.71.246.78 is a low-risk cloud infrastructure endpoint hosted on DigitalOcean. The IP exhibits standard web server behavior with no active threat indicators. Risk score: 25 (Low). Recommended action: Monitor but no immediate blocking required.

## Risk Profile

• Overall Risk Score: 25 (Low Risk)
• Reputation: Low Risk
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0

## Ownership & Geolocation

• ASN: 14061 (DigitalOcean, LLC)
• Network: DIGITALOCEAN-167-71-0-0
• CIDR Block: 167.71.0.0/16
• Location: Clifton, NJ, US
• Geolocation Confidence: GeoPlausible: false (RTT validation discrepancy detected)

## Network Classification

• Infrastructure Type: CloudCompute
• Service Purpose: Web Server
• Hosting Provider: DigitalOcean
• Cloud Environment: Yes
• Known Proxy/VPN/Tor: No

## Active Services

• Port 80/tcp: HTTP (Apache/2.4.57)
• Port 443/tcp: HTTPS (Apache/2.4.57)
• Port 22/tcp: SSH (OpenSSH 9.3p1 Ubuntu-1ubuntu3.6)
• TLS Certificate: Let's Encrypt (CN=admin.doctyc.com)
• HTTP Status: 503 (Service Unavailable)

## Threat Intelligence

• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None
• Abuse Confidence Score: Null
• Operator Score: 0.1304 (Minimal)

## Neighborhood Analysis (167.71.246.0/24)

• Abuse Density: 0 (Clean)
• Subnet Classification: Clean
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0
• Adjacent IP: 167.71.246.123 (Risk Score: 25, Authority Score: 50)

## Observation History

• Total Observations: 22
• Most Recent: 2026-06-21
• Signal Count: 1 of 8 max
• Historical Trend: Stable low-risk profile
• HTTP Fingerprint: Apache/2.4.57 (Ubuntu)
• Status Codes Observed: 503

## Control Plane

• Route Stable: No
• DNSSEC Valid: Yes
• BGP Prefix: 167.71.240.0/20
• IRR Consistency: Not assessed
• Route Changes (30d): 0
• MoAS: No

## Recommended Actions

No automatic firewall rules generated due to low-risk classification. The IP presents as a legitimate cloud web server hosting a domain (admin.doctyc.com) with standard Apache/HTTPS services.

## Intelligence Narrative

The target IP 167.71.246.78 operates as a standard DigitalOcean cloud web server with no malicious indicators. The infrastructure shows consistent hosting characteristics with Apache web serving and SSH access. DNSBL listing is minimal (1 of 8 lists) and does not correlate with active abuse campaigns. The adjacent neighbor IP (167.71.246.123) maintains similar risk characteristics. Subnet abuse density is zero, indicating the broader infrastructure maintains clean operational practices. Historical signals remain stable with no escalation in threat posture. The HTTP 503 status may indicate temporary service degradation rather than malicious activity.

## Conclusion

This IP represents benign cloud infrastructure. No immediate defensive action required. Continue routine monitoring but exclude from active threat blocks.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.