178.128.51.84📋 Copy

# IP Intelligence Briefing: 178.128.51.84/32

## Executive Summary

IP address 178.128.51.84 operates as a moderate-risk cloud infrastructure endpoint hosted on DigitalOcean (ASN 14061) in Singapore. The endpoint scored 65 on the risk scale and is listed on three out of eight threat feeds. The subnet environment shows mixed reputation characteristics with two sibling IPs flagged as threats.

## Infrastructure Profile

The IP resolved as DigitalOcean cloud compute infrastructure with standard web services enabled. Port 80 (HTTP), 443 (HTTPS), and 22 (SSH) were open. The endpoint served content via Caddy web server with HTTP/2 support and Content Security Policy headers active. A Let's Encrypt TLS certificate was present, indicating legitimate certificate management practices.

## Geolocation and Routing

Geolocation data placed the endpoint in Singapore (1.35°N, 103.82°E) with 45 km accuracy radius. Routing analysis showed the BGP prefix 178.128.48.0/20 associated with ASN 14061. The control plane indicated the route was not stable. Reverse DNS resolution returned no PTR records.

## Threat Indicators

The IP appeared on three DNSBL lists out of eight total threat feeds. No specific threat indicators, known campaigns, or attacker signatures were identified. The endpoint was not identified as a Tor exit node, known attacker, or spam source. Abuse confidence scores were unavailable.

## Subnet Analysis

The /24 subnet (178.128.51.84/24) classified as mostly clean with an abuse density score of 0 and inherited risk of 5. Two active sibling IPs were identified within the subnet. One neighbor IP, 178.128.51.27, maintained a risk score of 25 with an authority score of 50.

## Historical Observations

Analysis revealed 23 historical observations with activity spanning from mid-June 2026. Recent listings showed high severity classifications. HTTP fingerprints indicated Content Security Policy headers with restricted script sources and frame-ancestors settings. SSH banner identified OpenSSH 9.6p1 on Ubuntu infrastructure.

## Network Classification

The endpoint functioned as cloud hosting infrastructure rather than CDN, VPN, or residential proxy. Service purpose was identified as web server with no mobile or residential characteristics.

## Risk Assessment

The moderate risk score of 65 reflects DNSBL listings and historical scanning activity. However, the subnet's mostly clean classification and proper certificate infrastructure suggest legitimate hosting operations. The endpoint requires monitoring due to recent listing activity, though no direct malicious indicators were confirmed.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.