104.237.139.163📋 Copy

# IP INTELLIGENCE BRIEFING

Target IP: 104.237.139.163/32

Classification: LOW RISK

Date: 2026-06-25

---

## EXECUTIVE SUMMARY

IP 104.237.139.163 presents as a low-risk cloud infrastructure endpoint operated by Linode. The address demonstrates normal web server behavior with no active malicious indicators. Risk score of 25 reflects minimal threat posture. SOC analysts may treat this IP as benign unless corroborated threat intelligence indicates otherwise.

---

## INFRASTRUCTURE PROFILE

---

## NETWORK SERVICES

The IP exposes three services consistent with legitimate web hosting operations:

• Port 80/tcp: HTTP (Apache/2.4.58)
• Port 443/tcp: HTTPS (TLS 1.2/1.3, Apache/2.4.58)
• Port 22/tcp: SSH (OpenSSH_9.6p1 Ubuntu)

TLS Certificate issued by Let's Encrypt for domain `*.tesvg.site`. DNS reverse resolution confirms ownership via `104-237-139-163.ip.linodeusercontent.com`.

---

## THREAT ASSESSMENT

Current Risk Score: 25 (Low Risk)

Threat Indicators:

• No known attacker activity detected
• No spam source classification
• No Tor exit node association
• Zero blacklist hits across major threat feeds
• DNSBL listed on 1 of 8 monitored lists (non-critical)

Campaign Correlation: None detected. No certificate matches, banner matches, or correlated IPs in active campaigns.

---

## TEMPORAL ANALYSIS

Observation History: 26 signals recorded

Recent observations (2026-06-25) show:

• Consistent cloud hosting characteristics
• Stable network classification
• No ownership changes detected
• Threat persistence: 0 days
• Not classified as persistently malicious

---

## NEIGHBORHOOD CONTEXT

Subnet: 104.237.139.163/24

Abuse Density: 0 (Clean)

Classification: Clean

Sibling Analysis:

• Total siblings: 2
• Active siblings: 2
• High-risk neighbors: 0
• Medium-risk neighbors: 0
• Low-risk neighbors: 1 (104.237.139.218, risk score 25)

The /24 subnet demonstrates minimal abuse activity, supporting the benign nature of the target IP.

---

## RELATIONSHIP GRAPH

Total Relationships: 83

Key associations:

• Same Network: LINODE (multiple entries)
• DNS Associations: 104-237-139-163.ip.linodeusercontent.com
• Primary relationship type: Network infrastructure linkage

---

## RECOMMENDED ACTIONS

Firewall/Security Policy:

• No restrictive actions recommended
• Standard egress/ingress policies applicable
• SSH access should be evaluated per organizational policy

Monitoring: Continue passive monitoring; no immediate threat response required.

---

## CONCLUSION

IP 104.237.139.163 is a Linode cloud hosting endpoint exhibiting normal operational characteristics. The address shows no malicious behavior, no association with threat actors, and exists within a clean network neighborhood. Treat as benign infrastructure unless intelligence updates indicate otherwise.

Status: CLEAR FOR TRAFFIC

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.