66.6.42.252
IP 66.6.42.252 was assessed as a web server infrastructure belonging to WordPress.org under ASN 2635. The asset maintained a moderate risk profile with a risk score of 40. Geolocation data indicated Ashburn, Virginia, but RTT physics measurements contradicted the claimed location. The host served HTTP and HTTPS traffic on ports 80 and 443 using nginx, with valid SPF and DMARC records present but DNSSEC validation absent. The IP appeared on two DNSBLs out of eight total lists. Neighborhood analysis of the 66.6.42.0/24 subnet classified the environment as mostly clean with one threat sibling. Behavioral monitoring recorded no active attacker indicators or honeypot hits. Despite the lack of direct malicious activity, the system received a medium severity recommendation for rate-limiting due to the moderate risk classification and DNSBL presence. Overall data confidence remained low at 0.125.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | WordPress.org |
| ASN | AS2635 |
| Network Name | WORDPRESS-ORG |
| CIDR Block | 66.6.42.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | wordpress.org |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | wordpress.org |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.wordpress.orgwordpress.org |
| Valid From | 2026-07-25T19:43:56+00:00 |
| Valid Until | 2026-10-23T19:43:55+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 06524641DFFE956F2614756B87C5D8E77F48 |
| Thumbprint | 98B59F962F648B78751CD1FAAF2480BFD421D327 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 5 |
| ownership | 19% | 2 | 2 |
| reputation | 22% | 1 | 4 |
| geolocation | 33% | 2 | 5 |
| Overall | 25% | 10 | 22 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-06 04:55:02 UTC |
| Last Seen | 2026-09-25 18:23:46 UTC |
| Profile Built | 2026-09-25 18:35:08 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 43 |
Full dossier details are available via our API.