IPDebrief

199.232.37.171

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP address 199.232.37.171 was attributed to Fastly, Inc. (ASN 54113) within the SKYCA-3 CIDR block (199.232.0.0/16). The infrastructure was classified as a Content Delivery Network (CDN) serving Web Server functions, hosting open ports 80 and 443. Server banner analysis identified Varnish, while TLS certificates pointed to the shared domain f.shared-427-default.ssl.fastly.net.

Threat assessment indicated Low Risk with a risk score of 20. No blacklist entries, known campaigns, or active attacker indicators were present. Behavioral monitoring recorded no incidents, WAF violations, or enumeration strikes. The immediate neighborhood subnet (199.232.37.0/24) was classified as clean with zero abuse density.

Geolocation validation revealed a contradiction between the reported New York location and observed Round-Trip Time physics, flagging the data as

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionNew York
CityNew York
Timezoneβ€”
Latitude40.71
Longitude-74.01

🏒 Ownership & Registration

OrganizationFastly, Inc.
ASNAS54113
Network NameSKYCA-3
CIDR Block199.232.0.0/16
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)

πŸ” DNS Hygiene

Hygiene Score0% (None)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECNot signed
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting β€” Infrastructure provider without advanced routing
CDN

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
ServerVarnish
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
CN=f.shared-427-default.ssl.fastly.net
Issued by CN=GlobalSign Atlas R46 DV TLS CA 2026 Q3, O=GlobalSign nv-sa, C=BE
Self-signed: No
SANsf.shared-427-default.ssl.fastly.net
Valid From2026-09-04T05:16:07+00:00
Valid Until2027-03-22T04:16:07+00:00
TLS ProtocolTls12
Cipher SuiteTLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Signature Algorithmsha256RSA
Validity Period198 days
Serial Number01CFD5A14D5B0AF04C36FA91BC2E10F9
Thumbprint92A3E67164A4BE8881E568B5A2A0261ABB899A0D

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
11
routing
25%
11
services
25%
11
ownership
25%
12
reputation
0%
00
geolocation
25%
11
Overall20%56
Coverage: 5/6 dimensions Β· Data sufficiency: partial
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-09-15 00:04:52 UTC
Last Seen2026-09-15 00:04:52 UTC
Profile Built2026-09-15 00:21:04 UTC
Data FreshnessLive
Signal Types21
Total Observations21
πŸ” 21 signal types Β· 21 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.