167.99.218.207
# INTELLIGENCE BRIEFING: 167.99.218.207/32
Classification: LOW RISK / BENIGN
Date: 2026-08-05
Status: Active monitoring
## EXECUTIVE SUMMARY
IP address 167.99.218.207 operates within the DigitalOcean cloud infrastructure in Amsterdam, Netherlands. The IP exhibits clean network behavior with a risk score of 0 and no observed threat indicators. No immediate security action required.
## INFRASTRUCTURE PROFILE
| Attribute | Value |
|---|---|
| **IP Address** | 167.99.218.207 |
| **Organization** | DigitalOcean, LLC |
| **ASN** | 14061 |
| **Network Block** | 167.99.0.0/16 |
| **Location** | Amsterdam, North Holland, NL |
| **Infrastructure Type** | CloudCompute |
| **Network Role** | Hosting Provider |
Geolocation Validation: Confirmed via multi-source consensus (225 km accuracy radius). ICMP validation encountered blocked responses during probing.
## THREAT ASSESSMENT
| Metric | Value | Assessment |
|---|---|---|
| **Overall Risk Score** | 0 | Clean |
| **Provider Risk Score** | 0 | Clean |
| **Authority Score** | 0 | Clean |
| **Abuse Confidence** | N/A | Not flagged |
| **Blacklist Count** | 0 | Not listed |
| **Known Campaigns** | None | No correlation |
| **Tor Exit Node** | No | Confirmed |
| **Known Attacker** | No | Confirmed |
| **Spam Source** | No | Confirmed |
Network Classification: Cloud-hosted infrastructure with no publicly exposed services. Service banner analysis indicates firewall protection with no open ports detected.
## OBSERVATION HISTORY (18 signals)
Recent monitoring activity shows consistent benign behavior:
- 2026-08-05 20:13:45 UTC: DNSSEC validation signal, operator score 0.1304 (Minimal risk)
- 2026-07-30 06:22:47 UTC: Application layer scanning, zero certificate matches, zero banner matches
- 2026-07-30 06:15:09 UTC: Geolocation inference confirmed NL (Amsterdam), confidence 0.35
Threat Persistence: 0 days. No persistent malicious activity detected. Ownership stability: No changes recorded.
## NETWORK RELATIONSHIPS
- Connected Networks: 7 relationships identified, all within DIGITALOCEAN-167-99-0-0 network block
- Cross-Entity Links: No external relationships to organizations, certificates, or hostnames detected
- Correlated IPs: 0 correlated malicious IPs identified
## SUBNET ANALYSIS (167.99.218.0/24)
| Metric | Value |
|---|---|
| **Abuse Density** | 0.0 |
| **Classification** | Clean |
| **High-Risk Neighbors** | 0 |
| **Medium-Risk Neighbors** | 0 |
| **Low-Risk Neighbors** | 0 |
| **Total Siblings** | 1 |
The /24 subnet exhibits no abuse activity. No neighboring IPs flagged for malicious behavior.
## CONTROL PLANE DATA
- BGP Prefix: 167.99.208.0/20
- Route Stability: False (minor fluctuations detected)
- DNSSEC Validation: Valid
- RPKI State: Pending
- IRR Consistency: Not evaluated
## RECOMMENDED ACTIONS
Immediate Actions: None required. Risk score of 0 with no threat indicators.
Monitoring Recommendations:
- Standard cloud infrastructure monitoring
- No blocking or rate limiting necessary
- Maintain current security posture
## OPERATIONAL NOTES
This IP represents standard DigitalOcean cloud hosting infrastructure. The absence of open ports and threat indicators suggests either properly configured firewall rules or minimal service exposure. The subnet shows no abuse correlation with neighboring IPs.
Analyst Notes: Continue routine monitoring. No indicators of compromise or malicious activity observed in available signal history.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-167-99-0-0 |
| CIDR Block | 167.99.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Caddy |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-26 03:08:38 UTC |
| Last Seen | 2026-08-12 20:08:18 UTC |
| Profile Built | 2026-08-12 20:15:41 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.