IP INTELLIGENCE BRIEFING: 72.60.202.71
CLASSIFICATION: Low Risk โ Colocation Hosting Infrastructure
1. OVERVIEW
The target IP 72.60.202.71 is registered to Hostinger NOC (ASN 47583) within the HOSTINGER-HOSTING network block (72.60.200.0/21). The IP demonstrates a low-risk reputation profile with zero risk score, provider score, and authority score. Current classification identifies the infrastructure as colocation hosting with no active services exposed.
2. OWNERSHIP & NETWORK ATTRIBUTES
- Organization: Hostinger NOC
- Network Name: HOSTINGER-HOSTING
- ASN: AS47583 (Hostinger)
- CIDR Block: 72.60.200.0/21
- RIR Registration: ARIN
- Infrastructure Type: Colocation Hosting
- Service Status: Firewall/No Services Detected
- Abuse Contact: Abuse@hostinger.com
3. GEOLOCATION ANALYSIS
Geolocation data presents inconsistencies across observation sources:
- Primary profile: Atlanta, GA, US (America/New_York timezone)
- Historical observations: Mumbai, India and Vilnius, Lithuania
- Multiple geo sources with consensus disagreement indicates geolocation data aggregation from disparate sources. This is common for hosting infrastructure where routing paths vary.
4. THREAT INDICATORS
- Threat Indicators: None detected
- Blacklist Count: 0
- DNSBL Listed: 0/8 lists
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaigns: No known campaigns or certificate matches
5. DNS & SERVICES
- PTR Record: srv1291913.hstgr.cloud
- Forward Resolution: srv1291913.hstgr.cloud (hstgr.cloud domain)
- Open Ports: None (firewalled)
- TLS Certificate: None
- Email Auth: SPF/DMARC records not configured for this hostname
- Fingerprint: No HTTP server characteristics detected
6. NETWORK NEIGHBORHOOD
Subnet analysis of 72.60.202.0/24:
- Total Neighbors: 1
- Abuse Density: 0%
- Risk Distribution: 1 low-risk IP
- Neighbor IP: 72.60.202.155 (Risk Score: 0, Authority Score: 60)
The /24 subnet demonstrates clean reputation with no abuse density.
7. OBSERVATION HISTORY
Sixteen observations recorded. Key temporal patterns:
- Organization attribution consistently identifies Hostinger NOC
- One historical signal flagged AS1239 Sprint with threat indicators
- No persistent malicious behavior observed
- No threat persistence days recorded
8. RELATIONSHIP GRAPH
Four relationships identified:
- Three DNS associations to srv1291913.hstgr.cloud
- One network relationship to HOSTINGER-HOSTING
9. CONTROL PLANE
- Route Stability: False
- BGP Prefix: 72.60.200.0/21
- Origin ASN: AS47583
- Operator Score: 0.3478 (Basic)
- Route Changes (30d): 0
- DNSSEC Valid: Yes
- RPKI State: Not assessed
10. SECURITY RECOMMENDATIONS
Based on current risk profile, no immediate blocking actions recommended. This IP represents legitimate hosting infrastructure from Hostinger. Standard network hygiene applies:
- Monitor for new threat indicators
- No firewall rules required for defensive purposes
- Consider blocking only if specific threat intelligence emerges
CONCLUSION
IP 72.60.202.71 is a low-risk, legitimate hosting IP address operated by Hostinger. No malicious activity, blacklisting, or threat indicators were identified. The IP should be permitted through standard security controls with ongoing monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hostinger NOC |
| ASN | AS47583 |
| Network Name | HOSTINGER-HOSTING |
| CIDR Block | 72.60.200.0/21 |
| RIR | ARIN |
| Country | IN |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | srv1291913.hstgr.cloud |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | srv1291913.hstgr.cloud |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| 8443 | https-alt | tcp | โ |
| Closed Ports | 25, 3389, 8080 (4 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.14 |
๐ TLS Certificate
CN=cloudpanel.clp was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | cloudpanel.clpwww.cloudpanel.clp |
| Valid From | 2019-10-14T13:34:38+00:00 |
| Valid Until | 2020-10-13T13:34:38+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 00 |
| Thumbprint | 3BECE07FF14C8422E15E2D725E47F72289009311 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-21 12:55:47 UTC |
| Last Seen | 2026-07-29 09:36:25 UTC |
| Profile Built | 2026-07-29 09:48:32 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 24 |
Full dossier details are available via our API.