64.176.60.204
# IP Intelligence Briefing: 64.176.60.204
## Executive Summary
IP 64.176.60.204 is a cloud hosting infrastructure address assigned to The Constant Company, LLC (Vultr) with a moderate risk score of 50. The address is located in Osaka, Japan and operates as part of the CHOOP-1 network block (64.176.0.0/15). No active threat indicators or known malicious campaigns were detected.
## Ownership and Infrastructure
| Field | Value |
|---|---|
| **ASN** | 20473 (CHOOP-1) |
| **Organization** | The Constant Company, LLC |
| **Provider** | Vultr (Cloud Computing) |
| **Location** | Osaka, Japan |
| **CIDR Block** | 64.176.0.0/15 |
| **Network Type** | Cloud Hosting Infrastructure |
The IP is classified as cloud compute infrastructure with multi-service hosting capabilities. DNS records resolve to 64.176.60.204.vultrusercontent.com with forward resolution confirmed. SPF and DMARC authentication records are present.
## Risk Assessment
- Overall Risk Score: 50 (Moderate Risk)
- Abuse Confidence: Not detected
- Blacklist Count: 2 out of 8 DNSBL lists
- Known Attacker: No
- Spam Source: No
- Tor Exit/Proxy/VPN: Negative across all categories
The moderate risk score correlates with the cloud hosting environment classification rather than malicious activity. No known threat feeds or campaign associations were identified.
## Observed Services
| Port | Protocol | Service | Details |
|---|---|---|---|
| 80 | TCP | HTTP | Web service |
| 22 | TCP | SSH | OpenSSH_10.2p1 Ubuntu-2ubuntu3.5 |
| 8080 | TCP | HTTP-alt | Alternate HTTP service |
Server banner indicates nginx/1.28.3 running on Ubuntu. TLS certificates were not observed.
## Historical Observations
26 observations recorded over the monitoring period. Recent signals confirm:
- Cloud infrastructure classification (Vultr provider)
- Clean subnet classification with 0 abuse density
- No threat siblings in the /24 neighborhood
- Routing stability issues detected (isRouteStable: false)
No persistent malicious activity or ownership changes observed.
## Neighborhood Analysis
Subnet 64.176.60.204/24 shows:
- Abuse Density: 0 (clean)
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 0
No neighboring IPs flagged as threats. The subnet exhibits clean classification.
## Relationship Graph
- Network Associations: Multiple entries to CHOOP-1 network block
- DNS Associations: Resolved hostname 64.176.60.204.vultrusercontent.com (18 DNS association records)
## Recommended Actions
- Monitor: Track for any escalation in DNSBL listings
- Context: Treat as legitimate cloud hosting infrastructure
- Response: No immediate firewall blocking recommended; standard cloud provider reputation applies
## Conclusion
IP 64.176.60.204 represents standard Vultr cloud hosting infrastructure with moderate risk classification. The moderate risk score is consistent with cloud provider risk profiles and does not indicate malicious activity. No actionable threat indicators were detected. Treat as benign cloud hosting with standard monitoring protocols.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | The Constant Company, LLC |
| ASN | AS20473 |
| Network Name | CHOOP-1 |
| CIDR Block | 64.176.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 64.176.60.204.vultrusercontent.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 64.176.60.204.vultrusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | |
| 8080 | http-alt | tcp | — |
| Closed Ports | 25, 443, 3389, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.28.3 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.5 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 38% | 2 | 4 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 29% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-05 12:20:42 UTC |
| Last Seen | 2026-08-13 07:43:02 UTC |
| Profile Built | 2026-08-13 07:56:53 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.