72.58.82.22
Address 72.58.82.22 was associated with ASN 30600, Metronet, and registered within the 72.58.0.0/15 block. Geolocation data placed the endpoint in Lakeville, MN, US, though a contradiction existed between the claimed geolocation and RTT physics measurements. The system recorded a Low Risk reputation with a score of 25. Service scans returned no open ports or active banners, indicating the host was firewalled. Behavioral analysis showed zero honeypot hits, WAF violations, or total incidents. Threat intelligence feeds did not list the IP as a known attacker, spam source, or Tor exit, yet the threat actor type was classified as Suspicious Host. DNS analysis confirmed SPF authentication but noted the absence of DMARC records. Control plane data indicated route stability with zero changes over the last 30 days. Neighborhood classification was mostly clean with an inherited risk of 5. Due to signal contradictions, the recommendation was Monitor with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Metronet |
| ASN | AS30600 |
| Network Name | CINER-3 |
| CIDR Block | 72.58.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 72-58-82-0-22.metronet.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 72-58-82-0-22.metronet.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS30600 |
| Network Prefix | 72.58.80.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 25% | 2 | 4 |
| Overall | 18% | 10 | 17 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-18 23:51:35 UTC |
| Last Seen | 2026-09-05 17:20:22 UTC |
| Profile Built | 2026-09-05 17:33:03 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 31 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 72.58.82.22
Who owns the IP address 72.58.82.22?
72.58.82.22 is registered to Metronet. The address falls within the 72.58.0.0/15 network block. Registration is held at ARIN.
Where is 72.58.82.22 located?
Geolocation data places 72.58.82.22 in Lakeville, MN, United States. The local time zone is America/Chicago. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 72.58.82.22 malicious or safe?
72.58.82.22 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 72.58.82.22?
The reverse DNS (PTR) record for 72.58.82.22 is 72-58-82-0-22.metronet.net. This hostname is not forward-confirmed, so it should be treated as a weak signal.