64.125.31.171
IP Intelligence Briefing: 64.125.31.171/32
Ownership and Infrastructure
The address was identified as belonging to Zayo Bandwidth (ASN 6461, Netname: ABOVENET) within the US-MA region. The host was classified as firewalled with no active services, open ports, or exposed TLS certificates. DNS records resolved to ae1.mpr1.lhr18.uk.zip.zayo.com, and email authentication records for SPF and DMARC were confirmed present.
Threat and Behavior Analysis
The profile carried a Low Risk reputation score of 20. Threat analysis found no indicators of compromise, blacklisting activity, or known campaign associations. Behavioral monitoring recorded zero honeypot hits, enumeration strikes, or WAF violations. The surrounding subnet (64.125.31.171/24) was classified as mostly_clean with an abuse density of 0.0833, though one threat sibling was observed within the neighborhood.
Geolocation and Validation
Geolocation data placed the host in Boston, US, with geo-consensus marked as true. However, validation reported a contradiction where the claimed distance (7626km) conflicted with the measured RTT (94ms), as the minimum possible RTT for that distance was 152.5ms.
Recommendation
The profile confidence was rated very low (0.125) due to signal contradictions and insufficient data. The recommended action was to monitor the address for changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Zayo Bandwidth |
| ASN | AS6461 |
| Network Name | ABOVENET |
| CIDR Block | 64.124.190.0/23 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ae1.mpr1.lhr18.uk.zip.zayo.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | ae1.mpr1.lhr18.uk.zip.zayo.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-12 07:29:52 UTC |
| Last Seen | 2026-09-12 07:29:52 UTC |
| Profile Built | 2026-09-12 07:44:06 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.