185.199.111.215
The target IP 185.199.111.215 was associated with GitHub Admin under ASN 54113 within the RIPE registry. Infrastructure analysis identified the service as a Web Server operating on TCP ports 80 and 443. TLS certificates indicated the subject domain githubassets.com, and server banners reported Varnish with HTTP/2 support.
Reputation metrics classified the address as Low Risk with a score of 25. No known attacker, spam source, or Tor exit node status was detected. However, threat actor classification assigned a "Suspicious Host" tag without specific campaign correlation.
Data quality review highlighted signal contradictions. Geolocation consensus placed the host in the US, but RTT measurements of 16ms contradicted the reported distance of 7625.7km. The address was listed on one DNSBL out of eight total lists. DNS hygiene remained absent, lacking SPF, DMARC, and DNSSEC validation.
Operational guidance recommended monitoring the asset due to signal contradictions. Activity was confirmed live on 2026-09-14.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | GitHub Admin |
| ASN | AS54113 |
| Network Name | US-GITHUB-20170413 |
| CIDR Block | 185.199.108.0/22 |
| RIR | RIPE |
| Country | US |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Varnish |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.githubassets.comgithubassets.com |
| Valid From | 2026-07-27T00:00:00+00:00 |
| Valid Until | 2026-10-24T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 00DE4E0F682C30E35CA0A40ED3F8D1D0D6 |
| Thumbprint | 34A6B0F3F26E301C5027C4D35E07A56AA78841D6 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 33% | 2 | 4 |
| Overall | 25% | 10 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-14 18:18:00 UTC |
| Last Seen | 2026-09-23 17:20:39 UTC |
| Profile Built | 2026-09-23 17:26:53 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 27 |
Full dossier details are available via our API.