IPDebrief

170.64.141.43

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## INTELLIGENCE BRIEFING: 170.64.141.43/32

Date: June 2026

Classification: Low Risk Cloud Infrastructure

Analyst: IPDebrief Intelligence Operations

---

EXECUTIVE SUMMARY

IP 170.64.141.43 is a low-risk cloud computing infrastructure address operated by DigitalOcean, LLC. The IP demonstrates stable operational characteristics with no active threat indicators, no open services, and minimal operator risk scores. Current risk assessment indicates standard cloud hosting behavior with no malicious activity observed.

---

INFRASTRUCTURE PROFILE

AttributeValue
**IP Address**170.64.141.43/32
**ASN**14061
**Organization**DigitalOcean, LLC
**Network**DIGITALOCEAN-170-64-128-0
**Location**Sydney, NSW, Australia (AU)
**Infrastructure Type**CloudCompute / Hosting
**Geolocation Confidence**0.35 (Multi-signal inference)
**Risk Score**25/100 (Low Risk)

Network Classification:

---

THREAT ASSESSMENT

Current Threat Indicators:

Control Plane Data:

Service Exposure:

---

OBSERVATION HISTORY

The IP has accumulated 20 observations across the monitoring period, with the following temporal patterns:

Recent Signals (June 17-13, 2026):

Temporal Consistency:

---

NETWORK RELATIONSHIPS

The IP maintains 22 documented relationships, all categorized as "Same Network" pointing to the DIGITALOCEAN-170-64-128-0 network block. This confirms the IP resides within DigitalOcean's 170.64.128.0/18 network allocation.

---

NEIGHBORHOOD ANALYSIS

Subnet: 170.64.141.43/24

---

GEOLOCATION VALIDATION

MetricValue
Reported LocationSydney, Australia
Distance from Probe16,533.5 km
Minimum Possible RTT330.7 ms
Observed RTT219.0 ms
Status**RTT VIOLATION DETECTED**

*Note: Observed RTT (219ms) is below the minimum physically possible RTT (330.7ms) for the reported distance, indicating potential geolocation data inaccuracy. This is common with cloud infrastructure where physical server location may not match reported geolocation.*

---

RECOMMENDED ACTIONS

Based on the risk profile and operational characteristics:

1. Allow Standard Traffic: No blocking recommendations due to low risk score (25) and confirmed cloud infrastructure role.

2. Monitor DNSBL Listings: IP appears on 1 of 8 DNSBL listsβ€”review specific list content if inbound mail/connections are affected.

3. Cloud Infrastructure Context: Recognize as legitimate DigitalOcean hostingβ€”typical for web hosting, API endpoints, and cloud services.

4. RTT Anomaly Awareness: Be aware that geolocation may not reflect actual physical server location; consider RTT-based validation for critical operations.

5. No Immediate Threat Response: No active threat indicators require immediate mitigation or blocking.

---

CONCLUSION

IP 170.64.141.43 represents standard DigitalOcean cloud infrastructure with low risk characteristics. The IP shows no evidence of malicious activity, threat campaigns, or anomalous behavior. Standard operational monitoring is recommended without additional defensive measures. The RTT validation anomaly should be noted but does not indicate malicious activity.

Threat Level: LOW

Action Required: NONE

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡¦πŸ‡Ί Australia
RegionNSW
CitySydney
Timezoneβ€”
Latitude-33.90
Longitude151.19

🏒 Ownership & Registration

OrganizationDigitalOcean, LLC
ASNAS14061
Network Nameβ€”
CIDR Block170.64.128.0/18
RIRARIN
Countryβ€”
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)

πŸ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierHosting β€” Infrastructure provider without advanced routing
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
24
routing
32%
23
services
12%
22
ownership
28%
34
reputation
27%
13
geolocation
34%
23
Overall26%1219
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-07 23:03:53 UTC
Last Seen2026-06-27 01:47:06 UTC
Profile Built2026-06-27 22:14:23 UTC
Data FreshnessLive
Signal Types22
Total Observations28
πŸ” 22 signal types Β· 28 observations collected
This report is generated from 22+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.