65.87.7.202
The IP address 65.87.7.202 was identified as a Tor exit node with a reputation score of 59, classified as Moderate Risk. Ownership was attributed to ASN 215659 (Private Customer) within the ARIN RIR. Reverse DNS resolution returned gwk.themadhacker.net, and active services included HTTP on port 80, HTTPS on port 443, and SSH on port 22. Routing analysis indicated an origin of ASN 215659 traversing transit networks Comcast and GTT. Geolocation data was disputed by RTT physics measurements. The address was listed on one DNS blacklist, and the surrounding 65.87.7.0/24 subnet exhibited a 0.3333 abuse density. Based on elevated risk from multiple threat signals, a block
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Private Customer |
| ASN | AS215659 |
| Network Name | 65-87-7-0-24 |
| CIDR Block | 65.87.7.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | gwk.themadhacker.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | gwk.themadhacker.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 5/5 domains |
| DMARC | 5/5 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 5 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_10.0p2 Debian-7+deb13u4 |
🔐 TLS Certificate
CN=themadhacker.net was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | themadhacker.net |
| Valid From | 2026-06-28T17:10:29+00:00 |
| Valid Until | 2026-09-26T17:10:28+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 051A8485DCE3B6D4F529D7BB177D2B80BDA3 |
| Thumbprint | 908AE67BA11857DBD260B166B25C756F1DB18891 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 48% | 2 | 107 |
| routing | 37% | 3 | 3 |
| services | 30% | 1 | 4 |
| ownership | 37% | 1 | 7 |
| reputation | 43% | 1 | 31 |
| geolocation | 20% | 1 | 2 |
| Overall | 36% | 9 | 154 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-23 23:48:18 UTC |
| Last Seen | 2026-09-27 16:48:24 UTC |
| Profile Built | 2026-09-27 16:22:47 UTC |
| Data Freshness | Live |
| Signal Types | 32 |
| Total Observations | 707 |
Full dossier details are available via our API.