128.14.102.150

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP INTELLIGENCE BRIEFING

Target: 128.14.102.150/32

Date: Current

Risk Level: Low (Score: 30/100)

---

EXECUTIVE SUMMARY

IP 128.14.102.150 operates under ZENLA-1 (ASN 21859) within the ZL-LAX-MANAGED-HOSTING-0505 network block. The address maintains a low-risk profile with no active threat indicators, blacklist presence, or correlation to known malicious campaigns.

---

OWNERSHIP & INFRASTRUCTURE

Organization: ZENLA-1
ASN: 21859
Network: 128.14.102.0/24 (ARIN)
Service Classification: Web Server
BGP Prefix: 128.14.102.0/23

---

GEOSPATIAL ANALYSIS

Reported Location: México (19.61°N, 99.06°W)
Validation Status: ⚠️ GEOPLAUSIBLE: FALSE
Anomaly: Observed RTT (71ms) significantly below minimum theoretical minimum (186ms) for claimed distance (9,300km). This geographic discrepancy indicates potential location spoofing or misconfiguration.

---

OPEN SERVICES & PORTS

Port	Protocol	Service
443	TCP	HTTPS
22	TCP	SSH (OpenSSH 7.6p1)
8080	TCP	HTTP-ALT
3389	TCP	RDP

Observations:

No TLS certificate detected
No forward DNS resolution
No SPF/DMARC email authentication configured

---

THREAT INTELLIGENCE

Risk Score: 30/100 (Low Risk)
Blacklist Count: 0
Known Campaigns: None
Tor Exit/Proxy/VPN: No
Threat Persistence: None detected

---

SUBNET ANALYSIS

Subnet: 128.14.102.0/24
Abuse Density: 0.0 (Clean)
Classification: Clean
Threat Siblings: 0
Active Siblings: 0

---

OBSERVATION HISTORY

16 observations recorded (2026-07-30). Recent activity includes:

HTTPS connection attempts (connection_failed)
Port scanning with successful enumeration of services
Geolocation signals with RTT validation failures
No ownership changes detected

---

RELATIONSHIPS

Network associations limited to same-network entries (ZL-LAX-MANAGED-HOSTING-0505)
No external entity correlations identified

---

RECOMMENDATIONS

No specific firewall or security actions recommended. The IP presents no immediate threat indicators. Standard network hygiene practices apply.

---

ASSESSMENT

This IP represents legitimate hosting infrastructure with low-risk characteristics. Geographic validation anomalies warrant awareness but do not indicate malicious activity. No blocking or mitigation actions required at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇲🇽 Mexico
Region	México
City	—
Timezone	America/Mexico_City
Latitude	19.61
Longitude	-99.06

🏢 Ownership & Registration

Organization	ZENLA-1
ASN	AS21859
Network Name	ZL-LAX-MANAGED-HOSTING-0505
CIDR Block	128.14.102.0/24
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	20% (Poor)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Unknown
Service Purpose	Web Server
Network Tier	Unknown — Insufficient routing data to classify

No specific classification

🔌 Services & Open Ports

Port	Service	Protocol	Banner
443	https	tcp	—
22	ssh	tcp	SSH-2.0-OpenSSH_7.6p1
8080	http-alt	tcp	—
3389	rdp	tcp	—
Closed Ports	25, 80, 8443 (4 open / 7 scanned)

Server	—
HTTP Title	—
SSH Version	SSH-2.0-OpenSSH_7.6p1

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	25%	1	1
routing	25%	1	1
services	25%	1	1
ownership	0%	0	0
reputation	0%	0	0
geolocation	0%	0	0
Overall	12%	3	3

Coverage: 3/6 dimensions · Data sufficiency: partial

Data Coherence	Mostly Consistent (80%) — 1 contradiction(s)
Attribution	Low (35%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

⚠ Claimed geolocation contradicts RTT physics measurement

📅 Observation Timeline 🔄 Live

First Seen	2026-07-25 08:44:40 UTC
Last Seen	2026-07-30 02:48:20 UTC
Profile Built	2026-07-30 03:00:07 UTC
Data Freshness	Live
Signal Types	17
Total Observations	17

🔍 17 signal types · 17 observations collected

This report is generated from 17+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

128.14.102.150📋 Copy