167.99.247.178

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# INTELLIGENCE BRIEFING: 167.99.247.178/32

Classification: Low Risk Cloud Infrastructure

Date: 2026-06-14

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

Target IP 167.99.247.178 is a DigitalOcean cloud compute instance located in Frankfurt, Germany (DE). Risk score of 25/100 indicates low threat potential. Infrastructure is classified as cloud hosting with minimal operator risk score (0.1304). No active malicious campaigns or threat indicators observed.

---

## OWNERSHIP & GEOLOCATION

Organization: DigitalOcean, LLC
ASN: 14061
CIDR Block: 167.99.240.0/20
Location: Frankfurt am Main, Hesse, Germany
RIR: ARIN
Network Type: Cloud Compute / Single-Service Host

---

## THREAT ASSESSMENT

Metric	Value
Overall Risk Score	25 (Low Risk)
Abuse Confidence Score	Not Available
DNSBL Listings	1 of 8 lists
Max Severity	High
Is Tor Exit Node	No
Is Known Attacker	No
Is Spam Source	No
Operator Score	0.1304 (Minimal)

Threat Indicators: None detected. No known campaigns or threat feed matches.

---

## NETWORK CLASSIFICATION

Infrastructure Type: Cloud Compute
Connection Type: Cloud Hosting
Services: SSH (22/tcp)
TLS Certificate: None detected
Forward Resolution: 0 hostnames
PTR Records: None resolved
Email Auth: SPF/DMARC not configured

---

## OBSERVATION HISTORY

Recent signal activity (2026-06-14):

Geolocation: Germany (DE) - 35% confidence
Network Classification: DigitalOcean Cloud - 85% confidence
Network Performance: RTT 109-120ms, 5 probes
Geolocation Validation: Plausible (distance: 296.5km from claimed coordinates)
Threat Observations: 1 threat observation recorded
Ownership Stability: No ownership changes observed

---

## SUBNET ANALYSIS (167.99.247.0/24)

Abuse Density: 0 (Clean)
Risk Distribution: No high/medium/low risk neighbors
Classification: Mostly Clean
Active Siblings: 1 detected
Threat Siblings: 1 detected
Bogon Status: Not bogon

---

## RELATIONSHIP GRAPH

Total Relationships: 18
Primary Network: DIGITALOCEAN-167-99-0-0
Relationship Type: All classified as "Same Network"
Associated Entities: DigitalOcean network infrastructure

---

## SECURITY RECOMMENDATIONS

Risk Level: Low

Action Required: Standard monitoring

Firewall Rules: None recommended at this time. IP shows minimal risk indicators.

Recommended Actions:

1. No immediate blocking required based on current risk profile

2. Monitor for DNSBL listing persistence (1 of 8 lists)

3. Standard cloud infrastructure monitoring protocols apply

4. No specific firewall rules generated due to low risk score

Rationale: IP operates within expected cloud hosting parameters with minimal threat indicators. Low risk score (25/100) and clean neighborhood classification support continued monitoring without defensive blocking.

---

## CONFIDENCE METRICS

GeoValidation: Plausible (RTT: 109-120ms)
Ownership Stability: Stable (no changes)
Data Freshness: Recent observations from 2026-06-14
Signal Count: 20 observations recorded

---

*Intel Brief generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇩🇪 Germany
Region	HE
City	Frankfurt am Main
Timezone	Europe/Berlin
Latitude	51.17
Longitude	10.45

🏢 Ownership & Registration

Organization	DigitalOcean, LLC
ASN	AS14061
Network Name	—
CIDR Block	—
RIR	ARIN
Country	—
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	20% (Poor)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Firewalled / No Services
Network Tier	Hosting — Infrastructure provider without advanced routing

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	20%	2	4
routing	8%	1	1
services	21%	2	2
ownership	20%	2	3
reputation	21%	1	3
geolocation	31%	2	3
Overall	20%	10	16

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-05-11 21:43:36 UTC
Last Seen	2026-06-27 20:17:22 UTC
Profile Built	2026-06-28 14:21:16 UTC
Data Freshness	Live
Signal Types	19
Total Observations	24

🔍 19 signal types · 24 observations collected

This report is generated from 19+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

167.99.247.178📋 Copy