173.199.112.54
The IP address 173.199.112.54/32 was assigned to Vultr Holdings, LLC (ASN 20473) within the 173.199.112.32/27 CIDR block. Geolocation data placed the infrastructure in London, GB. The address maintained a low-risk reputation score of 25 and was identified as cloud compute hosting infrastructure serving as a Web Server.
Threat feeds indicated the address was not associated with known campaigns, Tor exit nodes, known attackers, or spam sources. The blacklist count remained 0. Active services included TCP port 443 (HTTPS). The TLS certificate was issued by Sectigo Limited for the subject *.vcnsl.com. DNS reverse resolution returned 173.199.112.54.vultrusercontent.com.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Vultr Holdings, LLC |
| ASN | AS20473 |
| Network Name | NET-173-199-112-32-27 |
| CIDR Block | 173.199.112.32/27 |
| RIR | ARIN |
| Country | Netherlands |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 173.199.112.54.vultrusercontent.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 173.199.112.54.vultrusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 4/4 domains |
| DMARC | 4/4 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.vcnsl.comvcnsl.com |
| Valid From | 2025-10-14T00:00:00+00:00 |
| Valid Until | 2026-11-14T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 00DA0AA79465CEF1CACAFA4E6B1B91BBAF |
| Thumbprint | 961BB5F87A1FC29E80F5A6C4B08680F17160E8E6 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 37% | 2 | 6 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 33% | 2 | 4 |
| Overall | 28% | 10 | 24 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 09:58:55 UTC |
| Last Seen | 2026-09-20 06:03:07 UTC |
| Profile Built | 2026-09-23 01:36:27 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 39 |
Full dossier details are available via our API.