49.51.166.228
IP Intelligence Dossier
Your IP: 216.73.216.123
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 49.51.166.228
Date: 2026-05-31
---
**1. Risk Profile**
- Overall Risk Score: Low (25/100)
- Reputation: Low Risk
- Provider Score: 0 (No malicious provider associations)
- Authority Score: 0
- Stability: Minimal operator risk (0.13).
---
**2. Ownership & Geolocation**
- Organization: TencentCloud (AS132203)
- Region: Registered to Shenzhen, China (apnic), but geolocation data shows Frankfurt, Germany (latitude/longitude missing).
- Subnet: 49.51.166.0/23 (part of TencentCloud’s 49.51.0.0/16 block).
- Abuse Density: 0% (clean subnet).
---
**3. Threat Indicators**
- Malicious Activity: None detected (no indicators in threat feeds, DNS, or TLS).
- Blacklist Status: Not listed in DNSBLs (1/8 total lists).
- TOR/VPN/CDN: Not associated with Tor, CDN, or VPN services.
---
**4. Network Behavior**
- Open Ports: None detected (firewalled / no services).
- DNS: No PTR records, SPF/DKIM/DMArC misconfigurations, or email-related risks.
- TLS/HTTP: No certificates or web server banners observed.
---
**5. Observation History**
- Recent Activity:
- No persistent threats or ownership changes.
- Geolocation anomalies noted (Frankfurt vs. Shenzhen).
- Minimal routing risk (operator score: 0.13).
---
**6. Neighborhood Analysis**
- Subnet: 49.51.166.0/24 (256 IPs).
- Neighbors:
- 49.51.166.139 (risk score: 0, authority score: 50).
- Abuse Density: 0% (clean subnet).
---
**7. Relationships**
- Linked Entities:
- Same network: TencentCloud (AS132203).
- No other subnets, domains, or certificates associated.
---
**8. Recommendations**
- Monitor Geolocation Discrepancies: Verify IP’s physical location (Frankfurt vs. Shenzhen).
- Maintain Current Controls: No firewall rules or WAF policies needed for this IP.
- Watch for Subnet Changes: Track neighbor activity in 49.51.166.0/24 for anomalies.
Conclusion: 49.51.166.228 is a low-risk, legitimately registered IP under TencentCloud with no malicious indicators. No immediate action required, but ongoing monitoring is advised for geolocation inconsistencies and subnet health.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | James Tian |
| ASN | AS132203 |
| Network Name | TencentCloud |
| CIDR Block | 49.51.0.0/16 |
| RIR | APNIC |
| Country | US |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
No certificate
Issued by —
N/A
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 45% | 2 | 5 |
| routing | 54% | 1 | 18 |
| services | 19% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 31% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 33% | 10 | 33 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-31 03:24:35 UTC |
| Last Seen | 2026-06-28 09:23:12 UTC |
| Profile Built | 2026-06-29 03:27:32 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 39 |
🔍 18 signal types · 39 observations collected
This report is generated from 18+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.