47.251.0.206

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Narrative

The IP address 47.251.0.206 is associated with Alibaba Cloud in the United States. It has a stable routing history and is located in Minkler, California, but there is very low confidence in the data. The neighborhood of this IP has a high abuse density, with one sibling IP classified as threatening, though the specific IP shows no active threats.

Classification Tags

DatacenterUnited StatesAlibaba CloudLow RiskVery Low Confidence

Signal Summary Table

Category	Finding	Confidence
Geolocation	Minkler, California, United States	High
Ownership	Alibaba Cloud - US	High
Infrastructure	Unknown (likely Datacenter)	Low
Threat Lists	0 hits	High
Open Ports	Firewalled / No Services	High
Risk Score	0/100	High
Neighborhood	High abuse density, 1 sibling threat	High
DNS Hygiene	None	Low
FCrDNS	Fail	Low
BGP Stability	Stable	High
Data Freshness	Live	High

Notable Findings

⚠️ Warning — The /24 subnet has a high abuse density, with one threatening sibling.
ℹ️ Info — The IP is associated with Alibaba Cloud, located in Minkler, California.
ℹ️ Info — No open services detected, likely firewalled.
❓ Unknown — Very low confidence in overall data sufficiency.

Recommended Actions

Allow with monitoring — low risk, no direct threat hits, but the high abuse density in the subnet warrants further observation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	CA
City	Santa Clara
Timezone	—
Latitude	37.35
Longitude	-121.95

🏢 Ownership & Registration

Organization	Alibaba Cloud - US
ASN	AS45102
Network Name	ALIBABA CLOUD - US
CIDR Block	47.251.0.0/16
RIR	ARIN
Country	United States
Abuse Contact	—

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	20% (Poor)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Single-Service Host
Network Tier	Hosting — Infrastructure provider without advanced routing

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
22	ssh	tcp	SSH-2.0-OpenSSH_7.4
Closed Ports	25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned)

Server	—
HTTP Title	—
SSH Version	SSH-2.0-OpenSSH_7.4

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	27%	2	4
routing	38%	4	5
services	19%	2	2
ownership	21%	2	2
reputation	22%	1	3
geolocation	13%	1	1
Overall	23%	12	17

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-05-15 19:26:59 UTC
Last Seen	2026-06-07 15:32:03 UTC
Profile Built	2026-06-07 15:36:22 UTC
Data Freshness	Live
Signal Types	25
Total Observations	25

🔍 25 signal types · 25 observations collected

This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

47.251.0.206📋 Copy