167.99.195.207
IP INTELLIGENCE BRIEFING: 167.99.195.207/32
Classification: LOW RISK / CLEAN
Risk Score: 25/100
Report Date: 2026-08-13
---
**OWNERSHIP & INFRASTRUCTURE**
IP 167.99.195.207 is hosted on DigitalOcean, LLC (ASN 14061) within the DIGITALOCEAN-167-99-0-0 /16 CIDR block. The infrastructure is identified as cloud compute infrastructure with a stable ownership profile and no recorded ownership changes.
**GEOLOCATION**
The IP resolves to Slough, England, GB (Europe/London timezone). Geo-validation indicates plausible location with average RTT of 97.2ms across 5 probes.
**NETWORK SERVICES**
Open ports analysis identified SSH (22/tcp) running OpenSSH 8.9p1 Ubuntu-3ubuntu0.10. No TLS certificates, HTTP titles, or custom service banners detected. The IP operates as a single-service host with no CDN, VPN, proxy, or hosting indicators.
**THREAT ASSESSMENT**
- Blacklist Status: Not listed on any major threat feeds (0 blacklist hits)
- Known Campaigns: None associated
- Tor/Exit Node: Negative
- Known Attacker: Negative
- Spam Source: Negative
- Abuse Confidence Score: Not applicable
**CONTROL PLANE**
Control plane analysis shows minimal operator risk score (0.1304). The IP is listed on 1 of 8 DNSBL checks. Route stability is flagged as false with no route changes in the past 30 days. DNSSEC validation is confirmed.
**TEMPORAL ANALYSIS**
Historical observation data (20 recent signals) indicates no persistent malicious behavior. Threat persistence days: 0. No threat observation events recorded. The IP classification has remained "clean" across all observation periods with an abuse density of 0 within its /24 subnet.
**SUBNET NEIGHBORHOOD**
The /24 subnet (167.99.195.207/24) contains no active sibling IPs and reports an abuse density of 0. No threat siblings detected in the neighborhood.
**SECURITY RECOMMENDATIONS**
No immediate blocking or firewall rules recommended. The IP presents no active threat indicators. Standard network monitoring and logging practices are advised.
---
Assessment: This IP represents typical cloud infrastructure activity with no evidence of malicious use. The low risk score, clean classification, and absence of threat indicators support continued monitoring rather than blocking.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-167-99-0-0 |
| CIDR Block | 167.99.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 4 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 32% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 30% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-02 10:53:27 UTC |
| Last Seen | 2026-08-13 03:37:39 UTC |
| Profile Built | 2026-08-13 04:00:49 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.