64.188.168.195
## Intelligence Briefing: 64.188.168.195/32
Classification: Low Risk
Date Generated: 2026-07-27
Data Sources: IPDebrief Intelligence Platform
---
Executive Summary
IP address 64.188.168.195 presents a low-risk profile with a risk score of 15/100. The address is associated with zito media (ASN 1246) within the 64.188.160.0/20 CIDR block. No active threat indicators, malicious campaigns, or known attacker signatures were identified. The subnet demonstrates zero abuse density with a clean classification.
---
Network Ownership & Infrastructure
| Attribute | Value |
|---|---|
| ASN | 1246 (zito media) |
| Organization | zito media |
| Network Name | MTHOID-DYN-CPE |
| RIR | ARIN |
| CIDR Block | 64.188.160.0/20 |
| Abuse Contact | Not listed |
| Registration Status | Active |
The IP is classified within a dynamic CPE network block with no provider or hosting infrastructure designation.
---
Geolocation Data
| Attribute | Value |
|---|---|
| Country | United States (US) |
| Region | Minnesota |
| City | Two Harbors |
| GeoValidation | Plausible (ICMP blocked) |
| Accuracy Radius | 2,500 km |
Geolocation data is consistent and plausible, though ICMP validation was unsuccessful due to blocking.
---
Threat Intelligence Profile
| Indicator | Status |
|---|---|
| Risk Score | 15 (Low) |
| Provider Score | 0 |
| Authority Score | 0 |
| Abuse Confidence | Not applicable |
| Blacklist Count | 0 |
| DNSBL Listed | 1/8 lists |
| Known Campaigns | None |
| Tor Exit Node | No |
| Known Attacker | No |
| Spam Source | No |
| Is Cloud/CDN/VPN | No |
| Is Hosting/Proxy | No |
No threat feeds or campaign correlations were detected. The IP shows no persistent malicious behavior over the observation period.
---
Network Services & DNS Analysis
| Service | Status |
|---|---|
| Open Ports | None detected |
| TLS Certificate | None |
| HTTP Banner | None |
| DNS PTR Records | None |
| Forward Resolution | Unconfirmed |
| Hosted Domains | None |
| Email Auth (SPF/DMARC) | Not configured |
The IP does not expose any active services. Network scanning revealed no open ports, indicating a firewalled or passive infrastructure.
---
Historical Observation Summary
Observation Count: 16 signals recorded
Analysis Period: Recent monitoring cycle (2026-07-27)
| Metric | Value |
|---|---|
| Ownership Changes | 0 |
| Threat Persistence Days | 0 |
| Threat Observation Count | 0 |
| Persistently Malicious | No |
| Honeypot Hits | 0 |
| Enumeration Strikes | 0 |
| WAF Violations | 0 |
The IP has demonstrated stable behavior with no ownership changes or persistent threat activity. All historical signals indicate clean classification with zero inherited risk from neighboring addresses.
---
Neighborhood Analysis (64.188.168.0/24)
| Metric | Value |
|---|---|
| Subnet Size | 256 addresses |
| Active Siblings | 0 |
| Threat Siblings | 0 |
| Abuse Density | 0 |
| Risk Distribution | High: 0, Medium: 0, Low: 0 |
The /24 subnet containing 64.188.168.195 shows zero risk distribution across all addresses. No neighboring IPs exhibit malicious behavior, indicating this is part of a benign infrastructure cluster.
---
Control Plane & Routing
| Attribute | Value |
|---|---|
| Origin ASN | 1246 |
| BGP Prefix | 64.188.160.0/20 |
| Route Stability | False |
| MoAS | No |
| DNSSEC Valid | Yes |
| RPKI State | Not reported |
| IRR Consistency | Not reported |
| Route Changes (30d) | 0 |
BGP routing is stable with no recent prefix announcements or withdrawals. DNSSEC is valid.
---
Recommended Actions
Security Posture: No immediate action required. The IP demonstrates low-risk characteristics consistent with benign infrastructure.
Firewall Rules: No blocking recommended. The IP does not match any threat indicators or attack patterns.
Monitoring: Continue standard monitoring. The IP shows no anomalous behavior and is not part of any known malicious campaigns.
Investigation Priority: Low. If this IP appears in logs, it is unlikely to be malicious. Correlation with other suspicious activity should determine if further analysis is warranted.
---
Intelligence Note: This IP appears to be part of zito media's dynamic CPE infrastructure. The lack of open services, combined with zero abuse density in the neighborhood, suggests this is either a reserved address, a firewalled endpoint, or a non-public-facing resource. No defensive measures beyond standard network monitoring are recommended at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | zito media |
| ASN | AS1246 |
| Network Name | MTHOID-DYN-CPE |
| CIDR Block | 64.188.160.0/20 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS1246 |
| Network Prefix | 64.188.160.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 12% | 2 | 2 |
| reputation | 25% | 1 | 4 |
| geolocation | 17% | 2 | 3 |
| Overall | 16% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-13 15:25:11 UTC |
| Last Seen | 2026-09-02 10:52:40 UTC |
| Profile Built | 2026-09-02 10:55:33 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 64.188.168.195
Who owns the IP address 64.188.168.195?
64.188.168.195 is registered to zito media. The address falls within the 64.188.160.0/20 network block. Registration is held at ARIN.
Where is 64.188.168.195 located?
Geolocation data places 64.188.168.195 in Two Harbors, Minnesota, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 64.188.168.195 malicious or safe?
64.188.168.195 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.