Intelligence gathering identified IP address 155.226.145.57 as a low-risk endpoint associated with Salesforce, Inc. (AS14618). The address was registered under the netname SFDC-AWS-BYOIP and resolved to a web server infrastructure located in San Francisco, US. Threat intelligence feeds did not flag the IP as a known attacker, spam source, or Tor exit node, with zero blacklist matches recorded.
Network services observed included HTTP on port 80, HTTPS on port 443, and HTTPS-alt on port 8443. TLS inspection revealed a certificate issued by DigiCert Global G2 for usa326.sfdc-yfeipo.salesforce.com. The service returned a 302 redirect status code and implemented HSTS headers.
The surrounding /24 subnet was classified as mostly clean with an abuse density of 0.4. Behavioral analysis recorded no honeypot hits or WAF violations, and no malicious campaigns were correlated. The recommendation for this asset remains to monitor, noting a severity of low based on the clean neighborhood classification and lack of active threat indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Salesforce, Inc. |
| ASN | AS14618 |
| Network Name | SFDC-AWS-BYOIP |
| CIDR Block | 155.226.144.0/20 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| 8443 | https-alt | tcp | β |
| Closed Ports | 22, 25, 3389, 8080 (3 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | usa326.sfdc-yfeipo.salesforce.com*.my.salesforce.com*.sandbox.my.salesforce.com |
| Valid From | 2026-08-23T00:00:00+00:00 |
| Valid Until | 2027-03-09T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 0907134A5834A52914E22AA761B8BDB4 |
| Thumbprint | 3D95DADDE3E0606DB20A6515A4C3092F81BD4393 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 4 |
| Overall | 26% | 10 | 23 |
| Data Coherence | Mostly Consistent (85%) β 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-03 16:59:43 UTC |
| Last Seen | 2026-09-25 12:13:26 UTC |
| Profile Built | 2026-09-25 12:28:41 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 39 |
Full dossier details are available via our API.