140.248.75.191📋 Copy

# IP Intelligence Briefing: 140.248.75.191

Classification: CDN Infrastructure (Moderate Risk)

Report Date: July 2026

Intel Source: IPDebrief Threat Intelligence Platform

---

## Executive Summary

IP address 140.248.75.191 is an edge infrastructure address belonging to Fastly, Inc. (ASN 54113), operating within the SKYCA-3 CDN network (140.248.0.0/16). The IP presents a moderate risk profile (Score: 50) with no active threat indicators. The address is associated with CDN infrastructure services and shows consistent operational behavior with minimal malicious activity.

---

## Technical Profile

---

## Threat Assessment

Active Threat Indicators

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Known Campaigns: None detected

DNSBL Status

• Listed Count: 2 out of 8 total threat feeds
• Status: Limited reputation concerns

Network Classification

• Provider: Fastly (CDN)
• Cloud Infrastructure: No
• Anycast: No
• Mobile/Residential: No

---

## Neighborhood Analysis (140.248.75.0/24)

Notable Neighbors

• 140.248.75.96: Risk Score 50 (Same risk profile)
• 140.248.75.129: Risk Score 25 (Medium-low)
• 140.248.75.151: Risk Score 25 (Medium-low)

The subnet demonstrates minimal abuse activity, consistent with legitimate CDN infrastructure operations.

---

## Historical Observation Trends

Observation Period: 16 recorded observations

Key Findings:

• Consistent US geolocation reporting
• Minimal operator score (0.1304) in recent assessments
• No persistent malicious behavior detected
• Neighborhood classification remained "clean" across observation period
• Limited threat persistence indicators

---

## Related Entities

Network Relationships:

• SKYCA-3 (Same Network)

---

## Recommended Security Actions

Based on the moderate risk profile (Score: 50), the following defensive measures are recommended:

Firewall Blocking Rules

```bash

# iptables

iptables -A INPUT -s 140.248.75.191 -j DROP

# nftables

nft add rule inet filter input ip saddr 140.248.75.191 drop

# nginx

deny 140.248.75.191;

```

WAF Integration

Cloudflare WAF:

```json

{

"description": "Block 140.248.75.191 — IPDebrief risk score 50",

"action": "block",

"filter": {

"expression": "ip.src eq 140.248.75.191"

}

}

```

AWS WAF:

```json

{

"Addresses": ["140.248.75.191/32"],

"Description": "IPDebrief risk 50"

}

```

---

## Intelligence Conclusion

IP 140.248.75.191 represents legitimate CDN infrastructure from Fastly with no evidence of active exploitation or malicious activity. The moderate risk score reflects standard CDN operational patterns rather than adversarial behavior. Security teams may consider blocking this IP if it appears in suspicious connection logs, but such action should be validated against contextual threat intelligence. The IP's association with Fastly CDN and clean neighborhood metrics support treating this as infrastructure rather than a threat source.

Recommendation: Monitor for anomalous behavior; consider blocking only if observed in context of malicious activity patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.