167.99.140.244
INTELLIGENCE BRIEFING: 167.99.140.244/32
Classification: LOW RISK / LEGITIMATE CLOUD INFRASTRUCTURE
---
**IP Overview**
- Address: 167.99.140.244/32
- Risk Score: 25/100 (Low Risk)
- Infrastructure: DigitalOcean Cloud Compute (AS14061)
- Network: DIGITALOCEAN-167-99-0-0 / 167.99.0.0/16
- Geolocation: Frankfurt am Main, Germany (DE)
- Classification: Cloud Compute / Hosting Service
---
**Threat Assessment**
The IP presents minimal threat indicators. No attack signatures detected, and the IP is not classified as a Tor exit node, known attacker, or spam source. Blacklist count is zero with a single DNSBL listing among 8 total lists. The operator score of 0.1304 indicates minimal malicious activity association. No active threat campaigns detected.
---
**Network Neighborhood Analysis**
The /24 subnet (167.99.140.0/24) demonstrates clean abuse density with zero threat siblings. Two neighboring IPs were identified:
- 167.99.140.5 (Risk: 25, Authority: 50)
- 167.99.140.176 (Risk: 25, Authority: 50)
All three siblings maintain low-risk profiles consistent with legitimate cloud infrastructure usage.
---
**Service & Port Analysis**
No open ports detected. The IP is classified as firewalled with no accessible services. No TLS certificates or HTTP titles observed. Connection type indicates firewalled/no services status, consistent with backend cloud infrastructure.
---
**Historical Observations**
Eighteen observations recorded with the most recent from 2026-08-12. Geolocation signals consistently validate Frankfurt, Germany positioning with 60-70% confidence. DNSBL listings were observed with high severity classification on one feed. Routing indicators show stable BGP prefix (167.99.128.0/20) with valid DNSSEC.
---
**Recommendations**
No immediate security actions required. The IP profile is consistent with legitimate DigitalOcean cloud hosting infrastructure. Monitor for any changes in threat indicators or reputation scores. Standard cloud infrastructure monitoring practices apply.
---
Prepared: IPDebrief Intelligence Platform
Status: Active Cloud Infrastructure - Low Risk
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-167-99-0-0 |
| CIDR Block | 167.99.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 20% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-26 03:08:38 UTC |
| Last Seen | 2026-08-12 20:07:48 UTC |
| Profile Built | 2026-08-12 20:15:41 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.