## IP Intelligence Briefing: 140.248.75.96/32
Classification: Low Risk CDN Infrastructure
Owner/Provider: Fastly, Inc. (ASN 54113)
Network: SKYCA-3 (140.248.0.0/16)
Geolocation: Frankfurt am Main, DE (Hesse)
Risk Assessment:
- Risk Score: 25/100
- Abuse Confidence: Not flagged as known attacker, Tor exit, or spam source
- Blacklist Status: Listed on 1 of 8 threat feeds (dnsblListedCount: 1)
- No active threat indicators or campaign correlations detected
Network Role: Content Delivery Network (CDN)
- Infrastructure Type: CDN
- Service Status: Firewalled / No Services exposed
- Anycast: Not detected
- Cloud/Hosting: No
Observation History:
- Total observations: 17
- Recent blacklist activity detected (2026-08-04) with high severity classification
- Subnet abuse density: 0.0667 (classification: mostly_clean)
- No persistent malicious activity observed
- Threat persistence days: 0
Neighborhood Analysis (140.248.75.0/24):
- Total siblings: 15
- Active siblings: 13
- Threat siblings: 1
- Abused IPs: 0
- Risk distribution: 14 low risk, 0 medium, 0 high
- Inherited risk score: 2
- All neighboring IPs maintain consistent risk score of 25 with authority scores of 50
Relationships:
- All 13 identified relationships link to same network entity: SKYCA-3
- No associations with external organizations, hostnames, or certificates
Technical Details:
- Open ports: None detected
- TLS certificates: None
- DNS records: No PTR hostnames, forward resolution not confirmed
- Reverse DNS: Not confirmed
- Email authentication: SPF/DMARC not configured
Recommended Actions:
No specific security actions required. IP operates as legitimate CDN infrastructure. Standard monitoring recommended. No firewall rules or blocking advised based on current risk profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Fastly, Inc. |
| ASN | AS54113 |
| Network Name | SKYCA-3 |
| CIDR Block | 140.248.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS54113 |
| Network Prefix | 140.248.75.0/24 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 25% | 1 | 3 |
| geolocation | 25% | 2 | 3 |
| Overall | 21% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-03 16:57:38 UTC |
| Last Seen | 2026-08-22 17:22:12 UTC |
| Profile Built | 2026-08-29 10:20:10 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 140.248.75.96
Who owns the IP address 140.248.75.96?
140.248.75.96 is registered to Fastly, Inc.. The address falls within the 140.248.0.0/16 network block. Registration is held at ARIN.
Where is 140.248.75.96 located?
Geolocation data places 140.248.75.96 in Frankfurt am Main, Hesse, Germany. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 140.248.75.96 malicious or safe?
140.248.75.96 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 140.248.75.96 a VPN, proxy, or data center address?
140.248.75.96 is classified as a content delivery network based on network ownership and behavioural analysis.