Intelligence Briefing: IP 204.9.160.50/32
Executive Summary
IP 204.9.160.50/32 was assessed as Low Risk with a risk score of 25. The address maintained a stable reputation with no known malicious activity or indicators of compromise. Analysts recommended monitoring the address at low severity due to its clean neighborhood classification and lack of active services.
Network Ownership and Geolocation
Ownership records identified the address as belonging to APTUM MANAGED SERVICES (CANADA) INC. (ASN 23498) within the 204.9.160.0/21 CIDR block. Geolocation data placed the host in New York, US, though ownership registration indicated a Canadian entity. The IP was attributed with moderate confidence.
Technical Profile
Passive scans detected no open ports, marking the host as firewalled with no active services. Forward resolution failed to confirm hostnames or domain associations. The IP was not identified as a Tor exit node, proxy, CDN, or hosting provider.
Threat and Behavioral Analysis
Threat intelligence reports indicated no indicators of compromise, known campaigns, or malicious behavior. The address was not listed on any blacklists, and the neighborhood classification was mostly clean with low abuse density. Behavioral analysis showed zero enumeration strikes, honeypot hits, or WAF violations.
Recommendation
The address is classified as a Suspicious Host due to threat indicators present but without specific classification. SOC analysts were advised to monitor the IP for future activity. No immediate firewall rules were required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | APTUM MANAGED SERVICES (CANADA) INC. |
| ASN | AS23498 |
| Network Name | CDS-254 |
| CIDR Block | 204.9.160.0/21 |
| RIR | ARIN |
| Country | Canada |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 6 |
| routing | 0% | 0 | 0 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 19% | 2 | 2 |
| Overall | 21% | 9 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-29 14:33:21 UTC |
| Last Seen | 2026-09-26 06:55:46 UTC |
| Profile Built | 2026-09-26 07:11:28 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 31 |
Full dossier details are available via our API.