# 155.102.130.248 — IP Intelligence Summary

155.102.130.248 is an IPv4 address operated by Alibaba Cloud LLC (AS24429), geolocated to United States. As of November 4, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/155.102.130.248
- Last updated: 2026-11-04

## Ownership

- Organization: Alibaba Cloud LLC
- Network name: AL-3
- Allocated block: 155.102.0.0/16
- ASN: AS24429 (https://ipdebrief.com/asn/24429)
- Regional registry: ARIN

## Location

- City: —
- Region: Virginia
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

IP 155.102.130.248/32 was classified as High Risk with a risk score of 70. Ownership records attributed the address to Alibaba Cloud LLC (ASN 24429) within the 155.102.0.0/16 CIDR block. Network analysis identified the target as a Tengine web server supporting HTTP/2.0 and HTTPS on ports 80 and 443, returning 403 status codes. TLS certificates were issued by GlobalSign for domains including *.tbcdn.cn and *.alibaba.com, with the subject listed as Alibaba (China) Technology Co., Ltd.

Geolocation validation revealed significant discrepancies. While primary records listed the country as US, RTT measurements of 19ms contradicted the physics of the claimed location, indicating proximity to Asia. Geo sources further disagreed between CN and US classifications. DNS hygiene was assessed as None, lacking SPF, DMARC, and DNSSEC validation. The profile contained three recorded contradictions regarding geolocation and certificate authority data. Despite a very low overall confidence score of 0.1833, the recommendation was classified as Block with Critical severity due to the high risk score and strong threat evidence.

## Nearby addresses

- 155.102.130.141 (https://ipdebrief.com/155.102.130.141)
- 155.102.130.205 (https://ipdebrief.com/155.102.130.205)

## Addresses sharing infrastructure

- 163.181.60.212 — Same TLS certificate (https://ipdebrief.com/163.181.60.212)
- 8.45.176.205 — Same server software (https://ipdebrief.com/8.45.176.205)
- 31.59.40.232 — Same server software (https://ipdebrief.com/31.59.40.232)
- 149.102.144.215 — Same server software (https://ipdebrief.com/149.102.144.215)
- 152.32.209.166 — Same server software (https://ipdebrief.com/152.32.209.166)
- 155.102.176.121 — Same server software (https://ipdebrief.com/155.102.176.121)
- 163.181.60.208 — Same server software (https://ipdebrief.com/163.181.60.208)
- 163.181.246.191 — Same server software (https://ipdebrief.com/163.181.246.191)
- 163.181.246.194 — Same server software (https://ipdebrief.com/163.181.246.194)

---

Source: IPDebrief, "155.102.130.248 IP intelligence", https://ipdebrief.com/155.102.130.248, updated 2026-11-04. Assessments are probabilistic.