109.104.152.40
IP Intelligence Briefing: 109.104.152.40
*Generated via IPDebrief tools (June 11, 2026)*
---
**1. Core Profile**
- Risk Score: 50 (Moderate Risk)
- Ownership:
- ASN: 136258
- Organization: "Abuse contact role object" (ARIN-registered)
- Network: `109.104.152.0/24`
- Geolocation:
- City: Kansas City, Missouri, United States
- Coordinates: 39.1027° N, -94.5778° W
- Timezone: America/Chicago
- Threat Indicators:
- No malicious activity detected (no malware, C2, or phishing indicators).
- No DNSBL listings or known attacker associations.
- Network Role:
- Firewalled / No Services (openPorts: empty).
- No CDN, cloud, or residential characteristics.
---
**2. Observation History**
- Last 30 Days:
- Stable geolocation (Kansas City, MO) since June 1, 2026.
- No changes in ownership or threat signals.
- Minimal DNSSEC validation (score: 0.15) and low routing stability.
---
**3. Network Relationships**
- Linked Entities:
- Same network: `ONEPROVIDER-US-KC` (ASN 136258).
- No subdomains, certificates, or email auth records associated.
- Subnet:
- `109.104.152.0/24` (no active or malicious neighbors detected).
---
**4. Recommended Actions**
- Firewall Rules:
- iptables: `iptables -A INPUT -s 109.104.152.40 -j DROP`
- Cloudflare WAF: Block IP with rule `ip.src eq 109.104.152.40`
- AWS WAF: Add `109.104.152.40/32` to IP set.
- Context:
- Moderate risk warrants monitoring, but no immediate mitigation required.
- Verify if the IP is part of a legitimate service (e.g., internal infrastructure).
---
**5. Summary**
This IP is associated with a provider having an abuse contact and is geolocated in Kansas City, MO. No malicious activity or threats were detected. While the risk score is moderate, the lack of active threats suggests it may be a low-priority target. SOC teams should monitor for unexpected behavior but may not require immediate action unless context indicates otherwise.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Abuse contact role object |
| ASN | AS136258 |
| Network Name | ONEPROVIDER-US-KC |
| CIDR Block | 109.104.152.0/24 |
| RIR | ARIN |
| Country | US |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 13% | 6 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-27 01:06:22 UTC |
| Last Seen | 2026-06-11 07:15:47 UTC |
| Profile Built | 2026-06-11 07:21:21 UTC |
| Data Freshness | Live |
| Signal Types | 13 |
| Total Observations | 13 |
Full dossier details are available via our API.