IPDebrief

208.87.243.61

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Threat Intelligence Briefing: IP 208.87.243.61/32

Observation History and Profile:

- DNS Activity: The IP address has shown consistent DNS-related activities, primarily involving domain registration and WHOIS lookup services.

- Traffic Patterns: Typical traffic involves legitimate requests for domain registration services, DNS queries, and WHOIS lookups. No significant anomalous traffic patterns have been observed.

Relationships and Associations:

Neighborhood Data:

Threat Assessment:

- Monitoring: Continue to monitor traffic for any deviations from established patterns that could indicate misuse.

- Verification: Ensure that any traffic involving this IP is legitimate and expected, particularly for services related to domain registration and DNS lookups.

Conclusion:

IP 208.87.243.61/32 is a legitimate service IP for GoDaddy.com LLC, primarily used for domain registration and DNS services. There have been no observed threats or malicious activities associated with this IP. Security operations teams should maintain standard monitoring practices to ensure ongoing integrity and security of network interactions involving this IP address.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionCA
CityLos Angeles
Timezoneβ€”
Latitude34.05
Longitude-118.24

🏒 Ownership & Registration

OrganizationPsychz Networks
ASNAS40676
Network Nameβ€”
CIDR Blockβ€”
RIRARIN
Countryβ€”
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRpanda.unixbsd.info
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnamespanda.unixbsd.info

πŸ” DNS Hygiene

Hygiene Score40% (Fair)
SPFPresent
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierUnknown β€” Insufficient routing data to classify
No specific classification

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
22sshtcp
8080http-alttcpβ€”
Closed Ports25, 3389, 8443 (4 open / 7 scanned)
Servernginx
HTTP Titleβ€”
SSH VersionSSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.13

πŸ” TLS Certificate

A self-signed certificate was detected. This is common for development servers, internal services, or IoT devices.
⚠️
E=support@xui.one, CN=XUI.one, OU=XUI.one, O=XUI.one, L=London, S=London, C=UK
Issued by E=support@xui.one, CN=XUI.one, OU=XUI.one, O=XUI.one, L=London, S=London, C=UK
Self-signed: Yes
SANsNone
Valid From2021-03-07T19:39:47+00:00
Valid Until2031-03-05T19:39:47+00:00
TLS ProtocolTls12
Cipher SuiteTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period3650 days
Serial Number2B76DF1EB9FEB201CFBBE17DFEF9E57988A18445
Thumbprint1E5E98237BF7E43D67BB1146C8A3B54F3CD8E7BF

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
36%
25
routing
13%
11
services
30%
24
ownership
20%
23
reputation
19%
13
geolocation
35%
23
Overall25%1019
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceMixed Signals (68%) β€” 2 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Geo sources disagree on country: US, UK
⚠ TLS certificate claims UK but primary geo says US

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-08 23:18:27 UTC
Last Seen2026-06-25 11:45:20 UTC
Profile Built2026-06-25 11:47:18 UTC
Data FreshnessLive
Signal Types22
Total Observations26
πŸ” 22 signal types Β· 26 observations collected
This report is generated from 22+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.