108.165.236.129📋 Copy

# IPDebrief Intelligence Briefing: 108.165.236.129/32

Classification: LOW RISK — No Immediate Action Required

Generated: 2026-07-24

Analyst: IPDebrief Intelligence Platform

---

## Executive Summary

IP address 108.165.236.129 is assessed as low-risk with an overall risk score of 25/100. The address is associated with Sculk Ltd. under the KOARA-INTERNATIONAL-LIMITED network, registered with ARIN. No active threat indicators, malware campaigns, or malicious behavior were detected during analysis. The IP presents as firewalled infrastructure with no open services.

---

## Ownership and Network Context

The subnet (108.165.236.0/24) demonstrates zero abuse density with no neighboring IPs flagged as high or medium risk. The route origin shows as not stable, indicating potential BGP route changes over the 30-day observation window.

---

## Threat Indicators

• Abuse Confidence Score: Not reported
• Blacklist Status: Listed on 1 of 8 DNSBL sources
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None identified
• Known Campaigns: Empty

No threat feeds, campaign correlations, or malicious reputation sources were detected.

---

## Network Role and Services

The IP presents no active services. DNS resolution points to `narsilion.n8n` with forward confirmation disabled. No TLS certificates or HTTP services were observed.

---

## Temporal Analysis

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No
• Historical Observations: 13 signals recorded

The IP has demonstrated stable ownership with no malicious behavior history. Recent signal observations (July 2026) confirm consistent geolocation to Frankfurt am Main, Germany, with operator score of 0.1304 (Minimal).

---

## Relationships and Associations

No certificate matches or correlated IPs were identified in the relationship graph.

---

## Recommended Actions

Current Risk Level: LOW — No firewall rules or blocking recommendations generated.

SOC Analyst Guidance:

• No immediate action required
• Monitor for any changes in threat indicators
• No evidence of malicious activity detected
• Low-risk infrastructure IP suitable for whitelist consideration if legitimate

---

## Intelligence Confidence

• Geolocation Confidence: Consensus true (1 source)
• DNS Confidence: Forward confirmed: false
• Control Plane: Operator score 0.1304 (Minimal)
• Overall Assessment: LOW RISK

---

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.