170.64.143.78
IP Intelligence Dossier
Your IP: 216.73.216.123
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
Threat Intelligence Briefing for IP 170.64.143.78
Overview
- Risk Profile: Moderate risk (50/100) with no active threats detected.
- Ownership: Owned by DigitalOcean, LLC (ASN 14061), part of a cloud infrastructure network.
- Geolocation: Registered to New South Wales, Australia (Sydney), though geolocation accuracy is flagged as "plausible" with a 2500km radius.
- Network Role: Cloud compute instance (DigitalOcean), no residential/mobile carrier associations.
Threat Indicators
- No malicious indicators, spam, or known attacker associations.
- BGP routing stability: "Route stable" with no recent changes.
- DNSSEC validated, no DNSBL listings.
Observation History
- First observed on June 1, 2026, with minimal signal confidence (0.23).
- No significant changes in risk scores or threat signals over time.
- Geolocation validation failed due to ICMP blocking, limiting accuracy.
Network Relationships
- Linked to the subnet `170.64.128.0/17` (DigitalOcean network).
- No correlated malicious IPs or campaigns detected.
Subnet Neighbors
- Subnet `170.64.143.78/24` has 2 IPs, with 1 active sibling (risk score 50).
- Subnet abuse density: "mostly_clean" (low risk).
Actionable Insights
- Monitor: Track for unexpected service changes or port openings, as the IP currently shows no active services.
- Verify: Confirm geolocation anomalies (Sydney, Australia) with DigitalOcean’s infrastructure map.
- Baseline: Use as a reference for normal cloud compute behavior, but maintain alerts for deviations.
Recommendations
- No immediate firewall rules or blocking required.
- Re-evaluate if the IP’s risk profile shifts or if new threats emerge in the subnet.
Conclusion
The IP is a legitimate DigitalOcean cloud instance with no active malicious activity. Its moderate risk score reflects network-level factors, not direct threats. Continuous monitoring is advised, especially for anomalies in service behavior or network associations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DigitalOcean, LLC |
| ASN | AS14061 |
| Network Name | DIGITALOCEAN-170-64-128-0 |
| CIDR Block | 170.64.128.0/17 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
No certificate
Issued by —
N/A
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 22% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 34% | 2 | 3 |
| Overall | 24% | 10 | 16 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Claimed geolocation contradicts RTT physics measurement
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-25 00:40:41 UTC |
| Last Seen | 2026-06-29 00:52:23 UTC |
| Profile Built | 2026-06-29 06:54:09 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 21 |
🔍 19 signal types · 21 observations collected
This report is generated from 19+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.