8.210.59.99
IP Intelligence Dossier
Your IP: 216.73.216.123
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 8.210.59.99
Date: 2026-06-10
---
**1. Risk Profile**
- Risk Score: 40 (Moderate Risk)
- Reputation: No known malicious activity detected.
- Threat Indicators: No malware, phishing, or exploit campaigns linked.
- Network Role: Web server (HTTP/HTTPS, SSH).
---
**2. Geolocation & Ownership**
- Country: Hong Kong (HK)
- City: Central
- ISP: IRT-ASEPL-SG (Alibaba Cloud, HK)
- ASN: 45102
- Subnet: 8.210.59.99/24 (abuse density: 1/100).
---
**3. Network & Service Activity**
- Services:
- HTTP (port 80), HTTPS (port 443), SSH (port 22).
- TLS Certificate:
- Issuer: WoTrus DV Server CA
- Subject: bijen.com
- SANs: bijen.com, www.bijen.com
- Server Fingerprint: `nginx/1.24.0 (Ubuntu)`
- DNS: No email authentication (SPF/DKIM) detected.
---
**4. Observation History**
- Stability: No significant changes in risk scores (last 30 days).
- Traffic Patterns:
- 200 OK HTTP responses, no suspicious banners.
- RTT: 227–230ms (plausible Hong Kong latency).
---
**5. Relationships & Neighbors**
- Linked Entities:
- AlibabaCloud_HK (multiple network relationships).
- Subnet Neighbors: No active neighbors detected (isolated IP).
---
**6. Recommendations**
- Monitor: Track TLS certificate validity and HTTP content for anomalies.
- Firewall: Allow traffic on ports 80, 443, and 22; block unsolicited connections.
- Verify: Confirm ownership with Alibaba Cloud for legitimacy.
Conclusion: This IP appears to be a legitimate web server operated by Alibaba Cloud in Hong Kong. No immediate threat detected, but continuous monitoring is advised.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-ASEPL-SG |
| ASN | AS45102 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.24.0 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
🔐 TLS Certificate
CN=bijen.com
Issued by CN=WoTrus DV Server CA [Run by the Issuer], O=WoTrus CA Limited, C=CN
Self-signed: No
| SANs | bijen.comwww.bijen.com |
| Valid From | 2025-09-01T00:00:00+00:00 |
| Valid Until | 2026-10-02T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 45643C5738FAE03ACE30B1878A876A19 |
| Thumbprint | 26E2950EC33B45AEFB8237ED8C9B35EC42F448EE |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 26% | 2 | 4 |
| ownership | 20% | 2 | 3 |
| reputation | 18% | 1 | 3 |
| geolocation | 32% | 2 | 3 |
| Overall | 24% | 10 | 19 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:04:35 UTC |
| Last Seen | 2026-06-26 18:11:36 UTC |
| Profile Built | 2026-06-26 02:23:04 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
🔍 23 signal types · 24 observations collected
This report is generated from 23+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.