139.84.198.243📋 Copy

# INTELLIGENCE BRIEFING: 139.84.198.243/32

Classification: LOW RISK

Generated: Current

Data Sources: IPDebrief Intelligence Platform

## EXECUTIVE SUMMARY

IP address 139.84.198.243 is a low-risk cloud compute infrastructure asset operated by Vultr (The Constant Company, LLC) with no active threat indicators. The IP is associated with legitimate web hosting services and has not been observed in malicious campaigns or threat feeds.

## INFRASTRUCTURE PROFILE

• Risk Score: 25/100 (Low Risk)
• Organization: The Constant Company, LLC (ASN 20473)
• Provider: Vultr (CloudCompute infrastructure)
• Network Classification: Web Server/Hosting
• Geolocation: Melbourne, Victoria, United States (with geovalidation discrepancies)
• Registration: RIR: ARIN

## NETWORK SERVICES

• Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS)
• Web Server: nginx/1.18.0 (Ubuntu)
• TLS Certificate: Let's Encrypt (R12) for domain chamberconnects.com.au
• DNS: 139.84.198.243.vultrusercontent.com
• Email Authentication: SPF and DMARC records present (vultrusercontent.com)

## THREAT ASSESSMENT

• Known Attacker Status: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Threat Campaigns: None observed
• Threat Persistence: 0 days
• DNSBL Listings: 1 of 8 lists (non-critical)

## GEOGRAPHIC ANOMALY

Geovalidation identified a significant RTT discrepancy: the IP is geolocated to Melbourne, US with an actual RTT of 227ms, which contradicts the minimum possible RTT of 328.6ms for the 16,430km distance. This suggests the geolocation data may be inaccurate or the IP is routing through distant infrastructure.

## NEIGHBORHOOD ANALYSIS

The /24 subnet (139.84.198.0/24) demonstrates:

• Abuse Density: Low (1/10 scale)
• Classification: Mostly Clean
• Threat Siblings: 1 out of 1 total active sibling
• Risk Distribution: No high-risk neighbors detected

## OBSERVATION HISTORY

26 signal observations recorded with recent activity concentrated in DNS resolution patterns. The IP shows stable ownership with no persistent malicious activity indicators.

## RELATIONSHIP GRAPH

51 relationships identified, primarily within the same network (CONSTANT organization). No external threat actor relationships detected.

## RECOMMENDATIONS

No immediate security actions required. The IP profile indicates legitimate cloud hosting infrastructure with proper security controls (SPF, DMARC). Standard monitoring practices apply.

---

Analyst Notes: This IP represents routine cloud infrastructure hosting services. The chamberconnects.com.au domain association suggests legitimate business operations. Continue standard threat monitoring but no elevated alert status warranted at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.