192.124.249.31
The IP address 192.124.249.31/32 was identified as a web server infrastructure node registered to Sucuri via ASN 30148. Ownership records showed registration under the organization SUCURI-ARIN-002 within the ARIN RIR, with a netname of SUCURI-ARIN-002. The address hosted standard HTTP and HTTPS services on ports 80 and 443, resolving via DNS to the hostname cloudproxy10031.sucuri.net.
The profile indicated a Low Risk reputation with a risk score of 25. Control plane analysis confirmed RPKI validity and IRR consistency, though the route was not stable with two changes observed in the last 30 days. A significant contradiction existed between the claimed geolocation in Menifee, US, and RTT physics measurements, which showed a 34ms response time against a distance of 9014km. While the neighborhood classification remained clean with zero threat siblings, the threat actor classification labeled the host as Suspicious due to signal contradictions. The overall profile confidence was low at 0.3209. The recommended action was to monitor the address for changes due to the presence of signal contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Sucuri |
| ASN | AS30148 |
| Network Name | SUCURI-ARIN-002 |
| CIDR Block | 192.124.249.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | cloudproxy10031.sucuri.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | cloudproxy10031.sucuri.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 2 — Moderate operator sophistication with routing hygiene |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 7 |
| routing | 38% | 4 | 5 |
| services | 27% | 2 | 4 |
| ownership | 30% | 3 | 4 |
| reputation | 22% | 1 | 3 |
| geolocation | 38% | 2 | 5 |
| Overall | 32% | 14 | 28 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-04 02:29:19 UTC |
| Last Seen | 2026-09-25 08:48:42 UTC |
| Profile Built | 2026-09-25 09:05:01 UTC |
| Data Freshness | Live |
| Signal Types | 31 |
| Total Observations | 44 |
Full dossier details are available via our API.