155.102.130.248
155.102.130.248 is an IPv4 address operated by Alibaba Cloud LLC (AS24429), geolocated to United States. As of November 4, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.
IP 155.102.130.248/32 was classified as High Risk with a risk score of 70. Ownership records attributed the address to Alibaba Cloud LLC (ASN 24429) within the 155.102.0.0/16 CIDR block. Network analysis identified the target as a Tengine web server supporting HTTP/2.0 and HTTPS on ports 80 and 443, returning 403 status codes. TLS certificates were issued by GlobalSign for domains including *.tbcdn.cn and *.alibaba.com, with the subject listed as Alibaba (China) Technology Co., Ltd.
Geolocation validation revealed significant discrepancies. While primary records listed the country as US, RTT measurements of 19ms contradicted the physics of the claimed location, indicating proximity to Asia. Geo sources further disagreed between CN and US classifications. DNS hygiene was assessed as None, lacking SPF, DMARC, and DNSSEC validation. The profile contained three recorded contradictions regarding geolocation and certificate authority data. Despite a very low overall confidence score of 0.1833, the recommendation was classified as Block with Critical severity due to the high risk score and strong threat evidence.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Alibaba Cloud LLC |
| ASN | AS24429 |
| Network Name | AL-3 |
| CIDR Block | 155.102.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 7/9 domains |
| DMARC | 5/9 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 9 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.tbcdn.cn*.1688.com*.3c.tmall.com*.alibaba.com*.alicdn.com*.aliexpress.com*.alikunlun.com*.aliqin.tmall.com*.alitrip.com*.aliyun.com |
| Valid From | 2026-06-26T14:54:02+00:00 |
| Valid Until | 2027-01-11T04:26:26+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
🛡️ Public Network Snapshot
| Origin ASN | AS24429 |
| Network Prefix | 155.102.130.0/24 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Contradictory (48%) — 3 contradiction(s) |
| Attribution | Very Low (20%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: CN, US
⚠ TLS certificate claims CN but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-18 14:23:42 UTC |
| Last Seen | 2026-11-04 09:21:57 UTC |
| Profile Built | 2026-11-04 09:29:40 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 35 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 155.102.130.248
Who owns the IP address 155.102.130.248?
155.102.130.248 is registered to Alibaba Cloud LLC. The address falls within the 155.102.0.0/16 network block. Registration is held at ARIN.
Where is 155.102.130.248 located?
Geolocation data places 155.102.130.248 in Virginia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 155.102.130.248 malicious or safe?
155.102.130.248 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 155.102.130.248?
Responsive ports observed on 155.102.130.248 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.