IPDebrief

139.162.4.102

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 139.162.4.102/32

## Executive Summary

IP 139.162.4.102 operates as a cloud hosting infrastructure node within the Linode provider network in Singapore. The asset presents a low risk profile with a risk score of 25. No active threat indicators, malicious campaigns, or persistent malicious behavior were observed. The IP maintains standard web server functionality with HTTP/HTTPS services and valid TLS certificate configuration.

## Technical Profile

Classification: Cloud Compute Infrastructure

Provider: Linode (ASN 63949)

Geolocation: Singapore (SG) - Coordinates: 1.35, 103.82

Network Role: Web Server/Hosting Platform

Infrastructure Type: CloudCompute

CIDR Block: 139.162.0.0/19

DNS Resolution:

Open Ports & Services:

## Threat Assessment

Overall Risk Score: 25 (Low Risk)

Abuse Confidence Score: Null (No malicious activity detected)

Blacklist Status: Not listed on major blacklists (0 blacklists)

DNSBL Listings: 1 out of 8 total lists (minor listing)

Known Campaign Associations: None detected

Tor/Proxy/VPN Status: Not a Tor exit node, proxy, or VPN service

Is Known Attacker: False

Is Spam Source: False

Temporal Analysis:

## Network Environment & Neighborhood

Subnet: 139.162.4.102/24

Abuse Density: 1 (Low)

Subnet Classification: mostly_clean

Total Sibling IPs: 1

Active Sibling IPs: 1

Threat Sibling IPs: 1

The immediate /24 neighborhood shows minimal abuse concentration. One threat sibling was observed within the subnet, indicating potential for related malicious activity from neighboring addresses.

## Relationship Graph

Total Relationships Identified: 53

Primary Associations:

## Control Plane Analysis

BGP Prefix: 139.162.0.0/19

Route Stability: Unstable (route changes observed in last 30 days)

RPKI State: Not validated

IRR Consistency: Not validated

Operator Score: 0.2609 (Basic)

## Geolocation Validation

Geo Plausibility: True

Claimed vs Observed Distance: 10,382.9 km

Minimum Possible RTT: 207.7ms

Observed RTT: 249.6ms (average)

Probe Count: 5

Violation Status: None

## Historical Observations

Total Observations: 22 signals recorded

Most Recent: 2026-06-25T08:15:43+00:00

Key Historical Signals:

## Recommended Actions

Current Recommendations: None required

Risk Level: Low - Standard monitoring sufficient

Firewall Rules: No blocking recommendations based on current threat profile

The IP address 139.162.4.102 represents a legitimate cloud hosting infrastructure component with no evidence of malicious activity. The single DNSBL listing warrants periodic verification but does not indicate immediate threat. Standard logging and monitoring practices are recommended for compliance and forensic readiness. No blocking or mitigation actions are advised at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΈπŸ‡¬ Singapore
Regionβ€”
CitySingapore
TimezoneAsia/Singapore
Latitude1.35
Longitude103.82

🏒 Ownership & Registration

OrganizationLinode Abuse Support
ASNAS63949
Network Nameβ€”
CIDR Blockβ€”
RIRARIN
Countryβ€”
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRnode270.myfcloudsg.com
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnamesnode270.myfcloudsg.com

πŸ” DNS Hygiene

Hygiene Score60% (Good)
SPF1/2 domains
DMARC0/2 domains
FCrDNSVerified
DNSSECValid
CAANot configured
Domains Checked2 domains

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting β€” Infrastructure provider without advanced routing
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
ServerApache
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
CN=prsmarket.site
Issued by CN=R12, O=Let's Encrypt, C=US
Self-signed: No
SANsprsmarket.site
Valid From2026-05-01T15:47:37+00:00
Valid Until2026-07-30T15:47:36+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period89 days
Serial Number06763077B64247523BAC4423948079E19C90
ThumbprintA3A149955C635E29D03C756BB2AE38657F23C9EF

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
26%
24
routing
13%
11
services
25%
23
ownership
20%
23
reputation
28%
13
geolocation
31%
23
Overall24%1017
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-08 17:17:35 UTC
Last Seen2026-06-27 13:29:34 UTC
Profile Built2026-06-28 07:35:06 UTC
Data FreshnessLive
Signal Types22
Total Observations28
πŸ” 22 signal types Β· 28 observations collected
This report is generated from 22+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.