207.56.18.239
IP Intelligence Briefing: 207.56.18.239
*Generated using IPDebrief tools: Profile, History, Relationships, and Neighborhood analysis*
---
**1. IP Profile**
- Risk Score: 25 (Low Risk)
- Ownership:
- ISP: NTT America, Inc. (ASN 54801)
- Network: NTTA-207-56 (ARIN-registed, 207.56.0.0/15)
- Abuse Contact: Available via RDAP
- Geolocation:
- Country: United States (US)
- Region/City: Unspecified (latitude/longitude null)
- Accuracy: 2500 km radius (likely rough estimate)
- Threat Indicators:
- No malicious activity detected (no indicators, blacklists, or campaigns).
- Not associated with Tor, spam, or known attackers.
- Network Role:
- Firewalled / No Services (no open ports, TLS, or HTTP detected).
- Likely static IP (no dynamic DNS or services).
---
**2. Observation History (Last 30 Days)**
- Geolocation: Confirmed US-based (cymru-country signal, 0.35 confidence).
- DNSBL Listing:
- Listed in 1/8 DNSBLs (low risk; no high-severity threats).
- BGP Data:
- Route origin: NTT America (ASN 54801).
- Route stability: 0 changes in 30 days (stable).
- Traceroute:
- Routed through Comcast (transit network).
- 17 hops, with 4 timeouts (potential latency or network congestion).
---
**3. Relationships**
- Network Affiliation:
- Part of NTTA-207-56 (NTT America's network).
- No direct links to malicious domains, organizations, or certificates.
- DNS:
- No PTR records or domain associations.
- No email authentication (SPF/DKIM) detected.
---
**4. Neighborhood Analysis**
- Subnet: 207.56.18.0/24
- Neighbor Data:
- 0 active neighbors reported.
- Abuse Density: 0% (no risky sibling IPs in subnet).
- Subnet Classification:
- No classification flags (e.g., CDN, proxy, or residential).
---
**5. Recommendations**
- Monitoring: No immediate action required.
- SOC Actions:
- Monitor for unexpected DNS or service activity (e.g., open ports, TLS certificates).
- Track changes in BGP routing or DNSBL listings.
- Confirm geolocation accuracy if precise regional targeting is critical.
Conclusion: This IP is part of a legitimate ISP network with no malicious indicators. While it is listed in one DNSBL, the low risk score and stable network behavior suggest it is not actively malicious. No firewall rules or blocking actions are recommended at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | NTT America, Inc. |
| ASN | AS54801 |
| Network Name | NTTA-207-56 |
| CIDR Block | 207.56.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| 8443 | https-alt | tcp | — |
| Closed Ports | 25, 3389, 8080 (4 open / 7 scanned) | ||
| Server | nginx/1.24.0 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
🔐 TLS Certificate
| SANs | images.apple.comwww.apple.comwww.apple.com.cn |
| Valid From | 2026-02-11T17:44:10+00:00 |
| Valid Until | 2026-08-18T17:30:10+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 187 days |
| Serial Number | 0A22ACE42FC71F463F953EF0B5A83F0C |
| Thumbprint | 7AA1D4BDDA4FABDA8C5906544FB16AD61EF7C202 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 27% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 6% | 3 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-29 18:14:47 UTC |
| Last Seen | 2026-06-11 22:20:54 UTC |
| Profile Built | 2026-06-11 22:43:41 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.