207.207.210.126
IP Intelligence Briefing: 207.207.210.126/32
Overview:
The IP address was assessed as Low Risk with a risk score of 25. Ownership records identified the address as belonging to Porkbun, LLC (ASN 16509) within the 207.207.210.0/24 CIDR block. Geolocation data placed the host in the United States.
Network Services:
Network analysis confirmed the role as a Web Server. Port scans detected open TCP connections on ports 80 (HTTP) and 443 (HTTPS). Server banner analysis returned "openresty." DNS resolution failed to return PTR hostnames, and the IP did not resolve to any hosted domains. Email authentication records, including SPF and DMARC, were absent.
Threat Intelligence:
Threat indicators showed zero blacklist associations. The IP was not flagged as a known attacker, spam source, Tor exit node, or proxy. No known campaigns or abuse indicators were recorded.
Control Plane:
Routing data indicated an AS Path of 2497 16509. RPKI validation state was valid. Route changes recorded over the preceding thirty days totaled two.
Assessment:
SOC analysts may monitor standard web traffic patterns consistent with the identified Web Server role, noting the low overall risk profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Porkbun, LLC |
| ASN | AS16509 |
| Network Name | PL-1287 |
| CIDR Block | 207.207.210.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | openresty |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 55% | 3 | 4 |
| services | 35% | 2 | 2 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 31% | 9 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | High (80%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-03 20:27:33 UTC |
| Last Seen | 2026-09-03 20:27:33 UTC |
| Profile Built | 2026-09-03 20:35:22 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 27 |
Full dossier details are available via our API.