151.101.195.52
Subject: IP Intelligence Briefing: 151.101.195.52/32
Ownership and Infrastructure
The address was registered to Fastly, Inc. (ASN 54113) within the 151.101.0.0/16 CIDR block (SKYCA-3). Network scanning identified the host as a Content Delivery Network (CDN) and Web Server. Open TCP ports 80 and 443 were detected. Server banner analysis revealed Varnish. TLS validation confirmed a certificate issued by Certainly Intermediate R1 for subject t.sni-820-default.ssl.fastly.net. An HTTP response code of 421 was returned during connection attempts.
Threat Assessment
The IP address maintained a risk score of 25 (Low Risk). No known attacker indicators, Tor exit nodes, or spam sources were identified. The address remained unlisted on blacklists (count: 0). Behavioral analysis recorded zero honeypot hits, enumeration strikes, or total incidents. The threat profile showed no evidence of active malicious activity.
Anomalies and Contradictions
Geolocation data assigned the US region; however, RTT measurements recorded a 7,625.7 km distance against a 15.0 ms round-trip time, violating physical distance constraints. This contradiction reduced overall confidence to 0.1667.
Recommendation
Monitor. Signal contradictions regarding geolocation and RTT physics require observation for changes, though overall severity remains low.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Fastly, Inc. |
| ASN | AS54113 |
| Network Name | SKYCA-3 |
| CIDR Block | 151.101.0.0/16 |
| RIR | RIPE |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Varnish |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | t.sni-820-default.ssl.fastly.net |
| Valid From | 2026-08-30T02:18:06+00:00 |
| Valid Until | 2026-09-29T02:18:05+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 29 days |
| Serial Number | 791A5B62F1820739D22B5AEA0CAB88127FCF |
| Thumbprint | B47B535F54C3D3830F4D0464571EAA5D38F9869F |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 27% | 2 | 3 |
| Overall | 21% | 10 | 13 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-06 18:57:54 UTC |
| Last Seen | 2026-09-21 07:35:08 UTC |
| Profile Built | 2026-09-21 07:52:15 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 34 |
Full dossier details are available via our API.