209.51.161.238
Intelligence Briefing: 209.51.161.238
Ownership and Network Role: The IP address was attributed to Hurricane Electric LLC (ASN 6939) within the 209.51.160.0/19 block. Network scans revealed no open ports, with the service purpose categorized as Firewalled / No Services. DNS resolution pointed to the PTR hostname clock.nyc.he.net, and the associated domain maintained valid SPF and DMARC records.
Threat Assessment: Risk assessment classified the address as Low Risk with a score of 25. No active threat indicators, blacklists, or known campaign associations were identified, and the neighborhood classification remained clean with zero abuse density. Despite the absence of confirmed malicious indicators, the system flagged the address as a Suspicious Host.
Observations and Anomalies: Operational analysis noted a geolocation contradiction where reported distance measurements conflicted with RTT physics (minimum possible RTT 152.5ms vs. observed 19ms). Signal contradictions were present, resulting in a Very Low overall confidence level.
Recommendation: Monitor the address for changes due to signal contradictions. Severity is classified as low.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Hurricane Electric LLC |
| ASN | AS6939 |
| Network Name | HURRICANE-5 |
| CIDR Block | 209.51.160.0/19 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | clock.nyc.he.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | clock.nyc.he.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 36% | 2 | 7 |
| Overall | 25% | 10 | 21 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 22:15:10 UTC |
| Last Seen | 2026-09-27 10:54:33 UTC |
| Profile Built | 2026-09-27 11:04:59 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 40 |
Full dossier details are available via our API.