198.180.152.141
IP address 198.180.152.141 was associated with AS4128 (MAINT-RGNET) in Dallas, TX, United States. The host functioned as a web server resolving to noc.ietf.org, operating HTTP, HTTPS, and SSH services on an Apache/2.4.58 server. Risk assessment classified the endpoint as Low Risk with a score of 25. The asset resided in a clean neighborhood classification with no threat indicators or known campaigns. A contradiction emerged between the claimed US geolocation and RTT physics measurements, which indicated a distance of 7997.4km. The system recorded one DNSBL listing out of eight checks. Monitoring was recommended due to signal contradictions despite the lack of active malicious behavior.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | MAINT-RGNET |
| ASN | AS4128 |
| Network Name | RGNET-RSCH-152 |
| CIDR Block | 198.180.152.0/24 |
| RIR | ARIN |
| Country | EE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | noc.ietf.org |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | noc.ietf.org |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache/2.4.58 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.19 |
🔐 TLS Certificate
| SANs | meeting.ietf.orgmon.noc.ietf.orgmonitoring.noc.ietf.orgnoc.ietf.org |
| Valid From | 2026-09-01T02:57:49+00:00 |
| Valid Until | 2026-11-30T02:57:48+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 06D60B21EF7DBDE1FEC3D7F505F1AE334EBF |
| Thumbprint | FA9969C84943176A72EA00EA1396427B3033CA41 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 4 |
| ownership | 27% | 2 | 4 |
| reputation | 26% | 1 | 4 |
| geolocation | 35% | 2 | 3 |
| Overall | 28% | 10 | 22 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 07:29:35 UTC |
| Last Seen | 2026-09-20 19:39:37 UTC |
| Profile Built | 2026-09-20 19:47:50 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 35 |
Full dossier details are available via our API.