67.207.95.129📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 67.207.95.129/32

Classification: Moderate Risk | Date: 2026-08-06

---

## EXECUTIVE SUMMARY

IP address 67.207.95.129 presents a moderate risk profile (score: 50/100) with cloud-hosted infrastructure on DigitalOcean. The IP is currently classified as a clean endpoint with no active threat indicators, though it appears on 2 of 8 DNSBLs. No malicious campaigns or attacker signatures detected.

---

## INFRASTRUCTURE PROFILE

---

## THREAT INDICATORS

• Risk Score: 50 (Moderate)
• Blacklist Count: 0 active lists
• DNSBL Listed: 2/8 total lists
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• Threat Feeds: None detected
• Campaign Correlation: None

---

## NETWORK ENVIRONMENT

• Subnet: 67.207.95.129/24
• Abuse Density: 0.0 (Clean)
• Neighboring IPs: 0 discovered
• Classification: Clean
• Route Stability: False
• BGP Prefix: 67.207.80.0/20
• Transit Networks: Comcast, Cogent

---

## OBSERVATION HISTORY

Total Observations: 21 signals

Recent Activity:

• 2026-08-06 01:20: Certificate queries (0 certificates resolved)
• 2026-08-06 01:20: Operator score: Minimal (0.1304)
• 2026-07-31 05:25: Geolocation observed via Cogent transit at JFK, New York

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: False

---

## RELATIONSHIP ANALYSIS

Connected Entities: 8 relationships identified

• All relationships map to same network (DIGITALOCEAN-67-207-64-0)
• No external hostname, organization, or certificate associations
• No correlated IPs detected

---

## RECOMMENDED SECURITY ACTIONS

Risk Score: 50 (Moderate) – Block recommended for defensive posture

---

## ANALYST NOTES

1. Risk Context: Moderate risk score (50) primarily driven by DNSBL presence rather than active threat indicators.

2. Infrastructure: DigitalOcean cloud environment with no open services detected.

3. Neighborhood: Clean subnet with no abuse density or threat siblings.

4. Monitoring: Recommend continued monitoring for any changes in DNSBL status or emergence of threat indicators.

5. Action Threshold: Consider blocking based on organizational risk tolerance, as current indicators suggest opportunistic scanning rather than targeted attacks.

---

*Report generated by IPDebrief Intelligence Platform. Recommendations are probabilistic and should be validated against additional threat intelligence sources before implementation.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.