206.1.90.211
Host 206.1.90.211 was attributed to ASN 269749 (NETCOM PLUS, C.A) within the 206.1.88.0/22 block. Reputation analysis assigned a Low Risk score of 25, though coherence metrics labeled the profile Contradictory with a score of 48. Network scanning identified open services on ports 80, 443, and 22, with the SSH banner confirming Dropbear usage. The TLS certificate associated with the host was issued by OpenWrt and claimed a country code of ZZ, conflicting with primary geolocation data placing the host in Miami, US. Geolocation validation further indicated a distance of 8073.2km with an RTT of 86ms, violating minimum physics constraints for the reported location. No active campaigns were correlated, and behavioral analysis found no enumeration strikes or WAF violations. Operational guidance recommended rate-limiting traffic due to multiple signal contradictions and an unreliable profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | NETCOM PLUS, C.A |
| ASN | AS269749 |
| Network Name | NETCOMP-CGNT-NET-1 |
| CIDR Block | 206.1.88.0/22 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-dropbear ? ??????C\?#?? ?curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-grou |
🔐 TLS Certificate
CN=OpenWrt, O="OpenWrt51*
eac9", L=Unknown, S=Somewhere, C=ZZ was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | None |
| Valid From | 2023-10-09T21:45:40+00:00 |
| Valid Until | 2025-10-08T21:45:40+00:00 (expired) |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256ECDSA |
| Validity Period | 730 days |
| Serial Number | 00A5644DEC62775451 |
| Thumbprint | 51C9FF1560A999C4F49981F5A333460135AD5F32 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 1 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 26% | 7 | 7 |
| Data Coherence | Contradictory (48%) — 3 contradiction(s) |
| Attribution | Very Low (20%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: US, ZZ
⚠ TLS certificate claims ZZ but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-15 14:16:07 UTC |
| Last Seen | 2026-09-15 14:16:07 UTC |
| Profile Built | 2026-09-15 14:31:13 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.