# IP Intelligence Briefing: 140.248.75.129/32
Classification: CDN Infrastructure (Low Risk)
Date: 2026-08-11
Analyst: IPDebrief Intelligence Team
## Executive Summary
IP 140.248.75.129 is identified as Fastly CDN infrastructure located in Frankfurt, Germany. Risk score of 25 indicates low risk. No open services detected, no threat indicators, and subnet classified as "mostly_clean." No immediate blocking recommended.
## Technical Profile
| Attribute | Value |
|---|---|
| **Organization** | Fastly, Inc. |
| **ASN** | 54113 |
| **Network** | 140.248.0.0/16 (SKYCA-3) |
| **Location** | Frankfurt am Main, Germany (DE) |
| **Risk Score** | 25 (Low Risk) |
| **Infrastructure Type** | CDN |
| **Services** | None detected (firewalled) |
| **DNSBL Listings** | 1 of 8 lists (high severity) |
## Threat Assessment
- Threat Indicators: None detected
- Known Campaigns: None
- Tor/Proxy/Hosting: Not applicable
- Abuse Confidence: Not applicable (legitimate CDN)
- Campaign Likelihood: None
## Neighborhood Analysis
- Subnet: 140.248.75.0/24
- Abuse Density: 0.2 (low)
- Total Siblings: 15
- Active Siblings: 15
- Threat Siblings: 3
- Neighbor Risk Distribution: 14 low, 0 medium, 0 high
All neighboring IPs in the /24 subnet show similar risk profiles (score 25), consistent with legitimate CDN infrastructure deployment.
## Historical Observations
- Total Observations: 18
- Recent Classification: Subnet "mostly_clean" with inherited risk of 7
- DNSBL Status: Single high-severity listing detected in recent history
- Ownership Changes: None
The historical DNSBL listing may result from CDN infrastructure being flagged by certain blocklists due to legitimate traffic patterns or shared IP space classification.
## Related Entities
- Network: SKYCA-3 (140.248.75.0/24)
- Relationships: Same network only; no external organizational or hostname relationships
## Recommendations
1. No blocking action required - Legitimate Fastly CDN infrastructure
2. Allow traffic if originating from expected CDN use patterns
3. Monitor the subnet for any behavioral changes
4. Investigate if this IP appears in unexpected contexts (potential spoofing)
5. Contextual Review - Verify DNSBL listing cause; may be legitimate CDN flagging
## Conclusion
This IP represents legitimate CDN infrastructure with no active threat indicators. The low risk score, clean subnet classification, and Fastly ownership confirm benign network role. Standard monitoring without blocking is appropriate unless additional contextual evidence emerges.
---
*Generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Fastly, Inc. |
| ASN | AS54113 |
| Network Name | SKYCA-3 |
| CIDR Block | 140.248.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS54113 |
| Network Prefix | 140.248.75.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 24% | 2 | 3 |
| Overall | 18% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 05:08:13 UTC |
| Last Seen | 2026-08-26 16:27:10 UTC |
| Profile Built | 2026-08-28 23:29:03 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 140.248.75.129
Who owns the IP address 140.248.75.129?
140.248.75.129 is registered to Fastly, Inc.. The address falls within the 140.248.0.0/16 network block. Registration is held at ARIN.
Where is 140.248.75.129 located?
Geolocation data places 140.248.75.129 in Frankfurt am Main, Hesse, Germany. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 140.248.75.129 malicious or safe?
140.248.75.129 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 140.248.75.129 a VPN, proxy, or data center address?
140.248.75.129 is classified as a content delivery network based on network ownership and behavioural analysis.