144.24.4.150

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP INTELLIGENCE BRIEFING: 144.24.4.150/32

## EXECUTIVE SUMMARY

IP 144.24.4.150 operates as an Oracle Cloud web server infrastructure with moderate risk scoring (50). The asset presents mixed operational characteristics: registered under Oracle infrastructure in Phoenix, AZ, while hosting Apple Inc. SSL certificates. No active threat indicators or malicious activity detected.

---

## INFRASTRUCTURE PROFILE

Attribute	Value
IP Address	144.24.4.150/32
Risk Score	50 (Moderate Risk)
ASN	31898
Organization	Domain Administrator / ORACLE-UK
Registry	ARIN
CIDR Block	144.24.0.0/16
Geolocation	Phoenix, AZ, US (34.05°N, -111.09°W)
Provider	Oracle Cloud

---

## NETWORK SERVICES & EXPOSURE

Open Ports Identified:

80/tcp - HTTP
443/tcp - HTTPS
8443/tcp - HTTPS-alt

Server Configuration:

Server Banner: openresty
TLS Certificate: Apple Public EV Server RSA CA 1 - G1
Certificate Subject: www.apple.com (Apple Inc., Cupertino, California)
No SPF or DMARC email authentication records configured

---

## THREAT ASSESSMENT

Current Threat Status: LOW

Indicator	Status
Known Attacker	No
Spam Source	No
Tor Exit Node	No
Blacklist Count	0
Abuse Confidence	N/A
DNSBL Listings	2 of 8 total lists

Risk Classification: Moderate Risk (Score 50)

Subnet Classification: Clean

Abuse Density: 0%

---

## OBSERVATION HISTORY

Monitoring Period: 19 observations recorded

Recent Activity:

2026-07-30T23:46:28 - HTTPS connection failure recorded
2026-07-30T23:45:56 - Geolocation signals confirmed Phoenix, AZ via ae2.3601.edge2.Phoenix1.net.lumen.tech
2026-07-30T23:45:27 - Certificate match identified for Apple Inc. (Cupertino, CA)

Threat Persistence: None detected

Ownership Changes: 0 recorded

---

## RELATIONSHIP ANALYSIS

Associated Networks: ORACLE-UK (5 relationship entries)

Network Context: All relationships indicate Oracle infrastructure affiliation

Certificate Associations: Apple Inc. SSL certificates

---

## NEIGHBORHOOD INTELLIGENCE

Subnet: 144.24.4.150/24

Metric	Value
Total Siblings	1
Active Siblings	1
Threat Siblings	0
Abuse Density	0
Classification	Clean

No additional sibling IPs flagged for abuse or malicious activity.

---

## OPERATIONAL NOTES

1. Certificate Anomaly: IP hosts Oracle infrastructure but serves Apple Inc. certificates, suggesting potential CDN or proxy configuration for Apple services

2. Geolocation Mismatch: Registered Phoenix, AZ but certificate indicates Cupertino, CA origin

3. No Active Threats: No known campaigns, attacks, or malicious behavior observed

4. Infrastructure Stability: No ownership changes detected; route stability flagged as unstable

---

## RECOMMENDATIONS

Security Posture: Acceptable for defensive monitoring

Action Required: None - no immediate threats identified

Monitoring Priority: Low-Moderate (due to mixed infrastructure signals)

Suggested Actions: None currently required. Continue routine monitoring for any changes in certificate ownership or network behavior.

---

*Report generated by IPDebrief Intelligence Platform. All data sourced from live network intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	AZ
City	Phoenix
Timezone	Europe/London
Latitude	34.05
Longitude	-111.09

🏢 Ownership & Registration

Organization	Domain Administrator
ASN	AS31898
Network Name	ORACLE-UK
CIDR Block	144.24.0.0/16
RIR	ARIN
Country	GB
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	60% (Good)
SPF	Present
DMARC	Present
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Unknown
Service Purpose	Web Server
Network Tier	Hosting — Infrastructure provider without advanced routing

No specific classification

🔌 Services & Open Ports

Port	Service	Protocol	Banner
80	http	tcp	—
443	https	tcp	—
8443	https-alt	tcp	—
Closed Ports	22, 25, 3389, 8080 (3 open / 7 scanned)

Server	openresty
HTTP Title	—

🔐 TLS Certificate

🔒

CN=www.cloudflare.com

Issued by CN=WE1, O=Google Trust Services, C=US

Self-signed: No

SANs	www.cloudflare.comtimeline.www.cloudflare.com
Valid From	2026-07-19T12:47:34+00:00
Valid Until	2026-10-17T13:47:32+00:00
TLS Protocol	Tls13
Cipher Suite	TLS_AES_256_GCM_SHA384
Signature Algorithm	sha256ECDSA
Validity Period	90 days
Serial Number	00F9303A1BABBDC03D0E05AEEC549633E1
Thumbprint	FE01546595B5BDCD351A53E848352B239423B3A4

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	27%	2	3
routing	13%	1	1
services	30%	2	3
ownership	27%	2	3
reputation	15%	1	2
geolocation	27%	2	3
Overall	23%	10	15

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Mostly Consistent (80%) — 1 contradiction(s)
Attribution	Low (35%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

⚠ Geo sources disagree on country: GB, US

📅 Observation Timeline 🔄 Live

First Seen	2026-07-29 22:49:37 UTC
Last Seen	2026-08-13 06:43:51 UTC
Profile Built	2026-08-13 00:10:08 UTC
Data Freshness	Live
Signal Types	23
Total Observations	26

🔍 23 signal types · 26 observations collected

This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

144.24.4.150📋 Copy