IPDebrief

209.40.121.36

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP 209.40.121.36 was identified as High Risk with a risk score of 70 and a critical severity recommendation. Ownership records linked the address to Fortinet Inc. (ASN 40934) within the 209.40.96.0/19 block. Geolocation data indicated the host was located in Hong Kong. The IP was categorized as Campaign Infrastructure and correlated with 13 additional addresses. While no open ports or web services were detected, the address was listed on one DNS blacklist. Security teams advised blocking the IP immediately using firewall rules to mitigate the associated campaign risk.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ญ๐Ÿ‡ฐ Hong Kong
RegionVirginia
CityHong Kong
TimezoneAsia/Hong_Kong
Latitude39.05
Longitude-77.49

๐Ÿข Ownership & Registration

OrganizationFortinet Inc.
ASNAS40934
Network NameFTC-58
CIDR Block209.40.96.0/19
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score0% (None)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECNot signed
CAANot configured

โ˜๏ธ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown โ€” Insufficient routing data to classify
No specific classification

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
35%
22
routing
25%
11
services
35%
22
ownership
25%
12
reputation
0%
00
geolocation
25%
11
Overall24%78
Coverage: 5/6 dimensions ยท Data sufficiency: partial
Data CoherenceMostly Consistent (80%) โ€” 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
โš  Geo sources disagree on country: US, HK

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-09-22 18:32:54 UTC
Last Seen2026-09-22 18:32:54 UTC
Profile Built2026-09-22 18:40:22 UTC
Data FreshnessLive
Signal Types19
Total Observations19
๐Ÿ” 19 signal types ยท 19 observations collected
This report is generated from 19+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.