IPDebrief

167.99.185.110

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 167.99.185.110/32

Classification: Low Risk / Cloud Infrastructure

Date: 2026-08-13

Analyst: IPDebrief SOC Team

---

## Executive Summary

IP address 167.99.185.110 is a low-risk (score: 25) cloud compute endpoint operated by DigitalOcean, LLC. No active threat indicators, blacklist entries, or malicious behavior were detected. The subnet demonstrates clean abuse density with zero threat siblings.

---

## Infrastructure Profile

AttributeValue
**Organization**DigitalOcean, LLC (ASN 14061)
**Network**167.99.0.0/16 (DIGITALOCEAN-167-99-0-0)
**Location**Toronto, Ontario, Canada
**Infrastructure Type**CloudCompute
**Risk Score**25 / 100
**Operator Score**0.1304 (Minimal)

---

## Threat Indicators

---

## Network Observations

---

## Neighborhood Analysis (167.99.185.0/24)

No neighboring IPs in the /24 subnet exhibited threat activity.

---

## Historical Signals (11 Observations)

Recent signals confirm DigitalOcean ownership and cloud infrastructure classification. Geolocation reports show Toronto, Canada with some variance in regional data. Subnet abuse density remained at zero across all observations.

---

## Intelligence Assessment

This IP represents a legitimate cloud hosting endpoint with minimal operator risk. The single DNSBL listing likely reflects routine scanning activity common in cloud environments rather than malicious behavior. No actionable threat indicators were identified.

---

## Recommended Actions

ActionPriority
**Allow Traffic**Standard (low risk profile)
**Monitor**Routine logging for outbound connections
**No Blocking**No firewall rules required

SOC Analyst Note: No blocking required. Standard monitoring protocols apply for cloud infrastructure endpoints.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡จ๐Ÿ‡ฆ Canada
RegionOntario
CityToronto
Timezoneโ€”
Latitude43.71
Longitude-79.41

๐Ÿข Ownership & Registration

OrganizationDigitalOcean, LLC
ASNAS14061
Network NameDIGITALOCEAN-167-99-0-0
CIDR Block167.99.0.0/16
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierTier 3 โ€” Basic operator with some routing infrastructure
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
CN=*.d.db.ondigitalocean.com
Issued by CN=YR2, O=Let's Encrypt, C=US
Self-signed: No
SANs*.d.db.ondigitalocean.com
Valid From2026-07-03T13:26:01+00:00
Valid Until2026-10-01T13:26:00+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period89 days
Serial Number053E142A2AD35C89DEE3FE310998FBF542DA
Thumbprint319F5A8C47312E00013BE5205EB96181B2D32966

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
30%
24
routing
19%
22
services
30%
24
ownership
30%
24
reputation
25%
13
geolocation
30%
24
Overall27%1121
Coverage: 3/6 dimensions ยท Data sufficiency: partial
Data CoherenceMixed Signals (60%) โ€” 2 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
โš  Claimed geolocation contradicts RTT physics measurement
โš  Geo sources disagree on country: US, CA

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-08-10 23:36:33 UTC
Last Seen2026-09-03 07:16:36 UTC
Profile Built2026-09-03 18:22:54 UTC
Data FreshnessLive
Signal Types24
Total Observations34
๐Ÿ” 24 signal types ยท 34 observations collected
This report is generated from 24+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.