IPDebrief

104.244.72.115

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API

🌍 Geolocation

Country🇺🇸 United States
Region—
CityLondon
Timezone—
Latitude—
Longitude—

🏢 Ownership & Registration

OrganizationBuyVM
ASNAS53667
Network NameBUYVM-LUXEMBOURG-01
CIDR Block104.244.72.0/21
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRtor-exit-hermes.greektor.net
Forward ConfirmedYes — FCrDNS verified
Forward Hostnamestor-exit-hermes.greektor.net

🔐 DNS Hygiene

Hygiene Score60% (Good)
SPF3/3 domains
DMARC3/3 domains
FCrDNSVerified
DNSSECNot signed
CAANot configured
Domains Checked3 domains

☁️ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierUnknown — Insufficient routing data to classify
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
80httptcp—
443httpstcp—
Server—
HTTP Title—

🔐 TLS Certificate

🔒
CN=www.saf4n2shommluy.net
Issued by CN=www.inpqk6zbu5dax.com
Self-signed: No
SANsNone
Valid From2026-07-07T00:00:00+00:00
Valid Until2027-03-03T00:00:00+00:00

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
34%
210
routing
19%
13
services
28%
26
ownership
17%
23
reputation
33%
155
geolocation
32%
25
Overall27%1082
Coverage: 6/6 dimensions · Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-07-10 03:03:15 UTC
Last Seen2026-09-29 23:34:39 UTC
Profile Built2026-09-29 23:19:41 UTC
Data FreshnessLive
Signal Types25
Total Observations152
🔍 25 signal types · 152 observations collected
This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 104.244.72.115

Who owns the IP address 104.244.72.115?

104.244.72.115 is registered to BuyVM. The address falls within the 104.244.72.0/21 network block. Registration is held at ARIN.

Where is 104.244.72.115 located?

Geolocation data places 104.244.72.115 in London. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 104.244.72.115 malicious or safe?

104.244.72.115 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 104.244.72.115?

The reverse DNS (PTR) record for 104.244.72.115 is tor-exit-hermes.greektor.net. This hostname is forward-confirmed, meaning it resolves back to the same address.

What ports are open on 104.244.72.115?

Responsive ports observed on 104.244.72.115 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.

🏘️ Related IP Addresses

Nearby addresses in 104.244.72.0/21

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.