IP Intelligence Briefing: 192.227.247.7
*Generated via IPDebrief analysis*
---
**Risk Profile**
- Overall Risk: Low Risk (riskScore: 0)
- Provider/Authority Scores: All zero.
- Geolocation: Denver, Colorado, USA (latitude/longitude unspecified).
- Threat Indicators: No malicious activity, spam, or known attacker associations.
- Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services detected).
---
**Observation History**
- Traceroute Activity:
- 21 hops traced, with 4 timeouts.
- Transit networks include Comcast.
- Last observed in Denver (iata code DEN) and Los Angeles (city-name pattern).
- Low Confidence Signals: Most observations have minimal confidence (β€0.30).
- No Persistent Threat: No repeated malicious indicators or long-term risk persistence.
---
**Network Relationships**
- Neighbors: No neighboring IPs found in the /24 subnet.
- Relationships: No linked entities (subnets, hostnames, organizations, or certificates).
---
**Key Findings**
1. Legitimate IP: No malicious indicators, abuse confidence, or threat feeds.
2. Network Behavior:
- Appears residential or corporate (traceroute through Comcast).
- No open services or DNS records detected.
3. Geolocation Consistency: Traceroute and geo data align with Denver, USA.
---
**Recommendations**
- Monitor: Track for unexpected service openings or DNS changes.
- Firewall: Allow traffic if necessary, but ensure no outbound rules permit risky protocols.
- Verify: Confirm ownership via ISP or organization if further context is needed.
Note: No immediate mitigation required. This IP appears to be benign but lacks sufficient data for conclusive long-term assessment.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | HostPapa |
| ASN | AS36352 |
| Network Name | CC-12 |
| CIDR Block | 192.227.128.0/17 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 192-227-247-7-host.colocrossing.com |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 192-227-247-7-host.colocrossing.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_8.9p1 Ubuntu-3 |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 0% | 0 | 0 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-06-06 19:45:52 UTC |
| Last Seen | 2026-06-13 15:36:30 UTC |
| Profile Built | 2026-06-13 15:48:09 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.