IPDebrief

64.131.47.178

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP 64.131.47.178 was classified as Low Risk with an overall risk score of 25. Ownership records attributed the asset to Metronet (ASN 30600, CINER-3) within the Zionsville, Indiana, US region. The host operated as a Web Server running Apache on ports 80 and 443, presenting a valid Let's Encrypt certificate for remote.scottallenmiller.com.

Threat analysis indicated the asset was not a known attacker or Tor exit node. However, the host was listed on one DNSBL out of eight total lists, and neighborhood data flagged one active threat sibling within the /24 subnet. Control plane analysis noted route instability and poor DNS hygiene, specifically missing DMARC, DNSSEC, and CAA records. Geolocation data contradicted RTT physics measurements, showing a reported distance of 6776km against an observed minimum RTT of 40ms.

Due to signal contradictions and route instability, the recommended action was to monitor the asset for changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionIndiana
CityZionsville
Timezoneβ€”
Latitude39.96
Longitude-86.26

🏒 Ownership & Registration

OrganizationMetronet
ASNAS30600
Network NameCINER-3
CIDR Block64.131.0.0/18
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR64-131-47-178.metronet.net
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnames64-131-47-178.metronet.net

πŸ” DNS Hygiene

Hygiene Score20% (Poor)
SPF6/6 domains
DMARC0/6 domains
FCrDNSNot verified
DNSSECNot signed
CAANot configured
Domains Checked6 domains

☁️ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierUnknown β€” Insufficient routing data to classify
No specific classification

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
ServerApache
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
CN=remote.scottallenmiller.com
Issued by CN=YE2, O=Let's Encrypt, C=US
Self-signed: No
SANsremote.scottallenmiller.com
Valid From2026-07-11T20:23:35+00:00
Valid Until2026-10-09T20:23:34+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha384ECDSA
Validity Period89 days
Serial Number054C7E987DE5075C7D44F713825103CC4F77
ThumbprintEDBDE9279D98932EA5152070ECB3124F758C7E19

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
27%
24
routing
13%
11
services
33%
25
ownership
27%
24
reputation
22%
14
geolocation
36%
27
Overall26%1025
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-08-29 19:26:49 UTC
Last Seen2026-09-24 09:38:13 UTC
Profile Built2026-09-24 09:52:25 UTC
Data FreshnessLive
Signal Types32
Total Observations54
πŸ” 32 signal types Β· 54 observations collected
This report is generated from 32+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.