152.2.23.104
Intellectual Property: 152.2.23.104/32
Ownership and Infrastructure
The address was registered to the University of North Carolina at Chapel Hill (AS36850). The network infrastructure identified as a Web Server exposed TCP ports 80, 443, and 22. The HTTPS certificate was issued by DigiCert Global G3 to Red Hat, Inc., covering the domain *.fedoraproject.org. The server returned an HTTP 503 Service Unavailable status code.
Threat and Risk Profile
The system maintained a Low Risk reputation with a risk score of 25. No specific blacklist entries or known campaign associations were detected. However, the threat actor classification labeled the host as "Suspicious Host" with a confidence level of 35.
Technical Anomalies
Data validation identified a contradiction between claimed geolocation and network physics. The reported distance of 6653.8 km contradicted the measured Round Trip Time of 41 ms, which is below the minimum possible latency of 133.1 ms for that distance.
Recommendation
The system recommended monitoring the address with low severity due to the presence of signal contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | University of North Carolina at Chapel Hill |
| ASN | AS36850 |
| Network Name | UNCCH-NET |
| CIDR Block | 152.2.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_10.2 |
🔐 TLS Certificate
| SANs | *.fedoraproject.orgfedoraproject.org |
| Valid From | 2025-09-25T00:00:00+00:00 |
| Valid Until | 2026-10-26T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 396 days |
| Serial Number | 090EBE95F806315BA0D4BF907DB1DE01 |
| Thumbprint | 2B1C8F29BDF689807513C55FE250D5385D2790D1 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 4 |
| Overall | 27% | 10 | 23 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-01 22:09:20 UTC |
| Last Seen | 2026-09-20 22:57:26 UTC |
| Profile Built | 2026-09-20 23:12:18 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 37 |
Full dossier details are available via our API.