IPDebrief

167.99.204.36

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 167.99.204.36/32

Classification: Cloud Infrastructure / Low Risk

Report Date: 2026-08-05

Analyst: IPDebrief Intelligence Platform

## Executive Summary

IP address 167.99.204.36 is a DigitalOcean cloud compute instance located in Slough, England (GB). The address presents a low-risk profile with an overall risk score of 25. No active threat indicators, malicious activity, or suspicious network associations were identified during analysis.

## Infrastructure Profile

AttributeValue
**IP Address**167.99.204.36/32
**Organization**DigitalOcean, LLC
**ASN**14061
**Network Block**167.99.0.0/16
**Geolocation**Slough, England, GB
**Infrastructure Type**CloudCompute
**Cloud Provider**DigitalOcean
**Classification**Cloud / Hosting

## Threat Assessment

Overall Risk Score: 25 (Low Risk)

Threat IndicatorStatus
**Known Attacker**False
**Spam Source**False
**Tor Exit Node**False
**Blacklist Count**0
**Open Ports**None detected
**Active Services**None detected (Firewalled)
**TLS Certificates**None
**DNS Records**None

Control Plane Analysis:

## Neighborhood Analysis

Subnet: 167.99.204.36/24

No neighboring IP addresses within the /24 subnet exhibited malicious activity or elevated risk scores.

## Observation History

Total Observations: 19 signals recorded

Temporal Analysis:

Signal Breakdown:

## Relationship Graph

Seven relationships identified, all classified as "Same Network" pointing to DIGITALOCEAN-167-99-0-0. No relationships to organizations, hostnames, or certificates were detected.

## Recommended Actions

Based on the current risk profile, the following security actions are recommended:

1. Monitoring: Continue standard monitoring for cloud infrastructure traffic

2. Firewall Rules: No specific blocking rules required due to low-risk classification

3. Threat Detection: No additional threat intelligence indicators to implement

## Network Behavior

## Conclusion

IP 167.99.204.36 represents a standard DigitalOcean cloud compute instance with no identified security concerns. The IP demonstrates clean classification across all threat indicators, with zero malicious activity, no blacklist associations, and a stable, low-risk operational profile. No immediate threat mitigation actions are required.

Status: Monitor | Risk Level: Low | Action Required: None

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฌ๐Ÿ‡ง United Kingdom
RegionEngland
CitySlough
TimezoneEurope/London
Latitude51.52
Longitude-0.62

๐Ÿข Ownership & Registration

OrganizationDigitalOcean, LLC
ASNAS14061
Network NameDIGITALOCEAN-167-99-0-0
CIDR Block167.99.0.0/16
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCPresent
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting โ€” Infrastructure provider without advanced routing
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
443httpstcpโ€”
22sshtcp
Closed Ports25, 80, 3389, 8080, 8443 (2 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.9

๐Ÿ” TLS Certificate

An expired certificate for CN=*.unlimitedvpnpro.com was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.
๐Ÿ”’
CN=*.unlimitedvpnpro.com
Issued by CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
Self-signed: No
SANs*.unlimitedvpnpro.comunlimitedvpnpro.com
Valid From2021-12-05T00:00:00+00:00
Valid Until2022-12-05T23:59:59+00:00 (expired)
TLS ProtocolTls13
Cipher SuiteTLS_AES_128_GCM_SHA256
Signature Algorithmsha256RSA
Validity Period365 days
Serial Number009B51861E02533B25CF6B05E1A2EE6DFD
Thumbprint2B2D13BFA4CF0E8D4EE037F4A615ABC790E2100C

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
30%
23
routing
13%
11
services
19%
22
ownership
27%
23
reputation
17%
12
geolocation
27%
23
Overall22%1014
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-26 03:08:38 UTC
Last Seen2026-08-12 20:08:08 UTC
Profile Built2026-08-12 20:15:41 UTC
Data FreshnessLive
Signal Types20
Total Observations21
๐Ÿ” 20 signal types ยท 21 observations collected
This report is generated from 20+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.