IPDebrief

167.71.31.191

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 167.71.31.191

## Executive Summary

IP 167.71.31.191 is a DigitalOcean cloud compute infrastructure address located in North Bergen, NJ, USA. The IP presents a LOW RISK profile with a risk score of 25/100. No active threat indicators were identified during analysis. The address operates as a firewalled cloud instance with no detected services.

---

## Ownership & Infrastructure

Provider: DigitalOcean, LLC

ASN: 14061

Geolocation: United States, New Jersey, North Bergen

Infrastructure Type: CloudCompute

Network Role: Firewalled / No Services

The IP is registered to DigitalOcean's cloud infrastructure network (BGP Prefix: 167.71.16.0/20). Route stability is marked as false, indicating potential BGP routing changes. The address is not classified as a proxy, VPN, CDN, or Tor exit node.

---

## Threat Indicators

IndicatorStatus
Blacklist Count0
Known AttackerFalse
Spam SourceFalse
Tor Exit NodeFalse
DNSBL Listed1 of 8 total lists
Open PortsNone detected
TLS CertificatesNone

No malicious campaigns or threat feed matches were identified. The IP shows no evidence of being associated with known attack campaigns or hosting malicious content.

---

## Neighborhood Analysis

Subnet: 167.71.31.0/24

Abuse Density: 0.3333 (Low-Moderate)

Subnet Classification: Mostly Clean

The /24 subnet contains 3 sibling IPs with 2 currently active. Threat distribution shows:

One threat-sibling was detected within the subnet. The overall abuse density of 0.3333 indicates moderate but not concerning neighborhood-level activity.

---

## Observation History

Total Observations: 23 signals tracked

Latest Signal: 2026-06-25 11:08:13 UTC

Threat Observation Count: 1

Historical analysis reveals minimal signal persistence (0 threat persistence days). The IP's operator score remains at 0.1304 (Minimal) across multiple observation periods. No significant changes in geolocation, DNS, or threat indicators were observed over the analysis period. Ownership changes recorded: 0.

---

## Network Services & DNS

PTR Hostname: prod-barium-nyc1-70.do.binaryedge.ninja

Forward Resolution: Confirmed

Domain: Not hosted (0 hosted domains)

Email Auth: SPF record present, DMARC not configured

The IP resolves to a DigitalOcean infrastructure hostname. No web services, email services, or TLS certificates were detected. Forward DNS resolution is functional with one reverse DNS entry.

---

## Recommended Actions

Based on the risk profile, the following actions are recommended:

1. No Immediate Action Required - Risk score of 25 indicates low threat level

2. Standard Logging - Log traffic from this IP for baseline monitoring

3. Allow Traffic - No firewall blocking recommended unless other threat indicators surface

Firewall Rules: No specific rules generated due to low risk classification.

---

## Intelligence Assessment

IP 167.71.31.191 represents a legitimate cloud compute infrastructure address with no active malicious indicators. The address operates within a mostly-clean subnet with low abuse density. While one threat-sibling was identified in the neighborhood, this IP shows no correlation to that activity.

Confidence Level: High (based on 23 historical observations)

Threat Likelihood: Minimal

Recommended Posture: Allow with standard logging

*Analysis completed: Current date*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionNJ
CityNorth Bergen
Timezoneβ€”
Latitude40.80
Longitude-74.02

🏒 Ownership & Registration

OrganizationDigitalOcean, LLC
ASNAS14061
Network Nameβ€”
CIDR Blockβ€”
RIRARIN
Countryβ€”
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnamesprod-barium-nyc1-70.do.binaryedge.ninja

πŸ” DNS Hygiene

Hygiene Score80% (Excellent)
SPFPresent
DMARCNot configured
FCrDNSVerified
DNSSECValid
CAAPresent

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierHosting β€” Infrastructure provider without advanced routing
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
33%
24
routing
8%
11
services
21%
22
ownership
24%
23
reputation
28%
13
geolocation
33%
23
Overall25%1016
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-08 23:18:10 UTC
Last Seen2026-06-27 14:22:03 UTC
Profile Built2026-06-28 08:27:38 UTC
Data FreshnessLive
Signal Types25
Total Observations30
πŸ” 25 signal types Β· 30 observations collected
This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.