139.162.149.220📋 Copy

IP INTELLIGENCE BRIEFING: 139.162.149.220

Classification: LOW RISK / Cloud Infrastructure

Date: 2026-08-12

Executive Summary:

IP 139.162.149.220 is a Linode cloud compute resource located in Frankfurt am Main, Germany (AS63949). The IP presents a low-risk profile with a risk score of 25/100. Analysis indicates legitimate hosting infrastructure with no active threat indicators or persistent malicious behavior.

Ownership & Infrastructure:

• Provider: Linode (AS63949)
• Network: 139.162.0.0/16 (EU-LINODE-20141229)
• Location: Frankfurt am Main, Hesse, Germany
• Infrastructure Type: Cloud Compute
• Ownership Stability: Stable with zero ownership changes observed

Network Services:

• Port 80/tcp: HTTP (nginx/1.24.0 Ubuntu)
• Port 443/tcp: HTTPS
• Port 22/tcp: SSH (OpenSSH 9.6p1 Ubuntu-3ubuntu13.18)
• TLS Certificate: Let's Encrypt issued for hr-home.objects.ws
• DNS Resolution: 139-162-149-220.ip.linodeusercontent.com

Threat Assessment:

• Risk Score: 25 (Low Risk)
• Threat Indicators: None observed
• Known Attacker: False
• Tor Exit Node: False
• Blacklist Status: Listed on 1 of 8 DNSBLs (minor reputation impact)
• Abuse Confidence: Not elevated
• Threat Persistence: Zero days (not persistently malicious)

Historical Analysis:

28 signal observations recorded. Recent observations confirm:

• Valid SPF and DMARC records present for associated domains (objects.ws, linodeusercontent.com)
• Geographic validation consistent with Frankfurt location (avg RTT: 112.8ms, distance: 296.5km)
• No escalation in threat profile over observation period

Neighborhood Analysis:

• Subnet: 139.162.149.220/24
• Abuse Density: 0 (low)
• Risk Distribution: No high-risk neighbors identified
• Classification: Mostly clean subnet

Recommendations:

• Action: Monitor as standard cloud infrastructure; no immediate blocking required
• Firewall: Allow inbound traffic on ports 80, 443, 22 if business requires SSH access
• Monitoring: Continue baseline monitoring for any changes in threat profile
• Context: IP is part of legitimate Linode hosting infrastructure with proper email authentication configured

Conclusion:

This IP represents routine cloud hosting activity from a major provider. The low-risk score, proper DNS/email authentication, and lack of threat indicators support classifying this as benign infrastructure requiring standard monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.