151.101.3.52
IP address 151.101.3.52 was identified as a Low Risk asset with a risk score of 20. Ownership records attributed the address to Fastly, Inc. (ASN 54113) within the 151.101.0.0/16 block. The infrastructure functioned as a Content Delivery Network and Web Server, utilizing TCP ports 80 and 443. Network analysis detected a Varnish server banner and TLS certificates issued by Certainly Intermediate R1.
Threat intelligence queries returned no indicators. The address was not flagged as a known attacker, Tor exit node, or spam source, and zero blacklists were present. Behavioral analysis showed no honeypot hits, enumeration strikes, or WAF violations. However, a geolocation contradiction existed. The consensus location was recorded as the US, but RTT measurements of 13ms conflicted with the reported distance of 7,625 km, which requires a minimum theoretical RTT of 152.5 ms.
Neighborhood data indicated an abuse density of 0.5 with one threat sibling among active peers in the /24 subnet. Overall profile confidence was rated Very Low (0.125). No active attacker behavior was recorded, but the recommendation remained to monitor due to signal contradictions. The profile status was live as of September 9, 2026.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Fastly, Inc. |
| ASN | AS54113 |
| Network Name | SKYCA-3 |
| CIDR Block | 151.101.0.0/16 |
| RIR | RIPE |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Varnish |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | t.sni-820-default.ssl.fastly.net |
| Valid From | 2026-08-30T02:18:06+00:00 |
| Valid Until | 2026-09-29T02:18:05+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 29 days |
| Serial Number | 791A5B62F1820739D22B5AEA0CAB88127FCF |
| Thumbprint | B47B535F54C3D3830F4D0464571EAA5D38F9869F |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 42% | 2 | 6 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 3 |
| geolocation | 38% | 2 | 5 |
| Overall | 28% | 10 | 23 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-01 05:47:29 UTC |
| Last Seen | 2026-09-21 04:06:22 UTC |
| Profile Built | 2026-09-21 04:13:17 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 39 |
Full dossier details are available via our API.