140.82.121.3📋 Copy

# IP Intelligence Briefing: 140.82.121.3

## Executive Summary

IP address 140.82.121.3/32 is a low-risk infrastructure endpoint belonging to GitHub, Inc. The IP demonstrates clean security posture with no threat indicators, zero blacklist associations, and legitimate cloud hosting operations in Frankfurt, Germany. No defensive action is currently recommended.

## Ownership and Classification

• Organization: GitHub, Inc. (ASN 36459)
• Network: GITHU (140.82.112.0/20)
• Classification: Web Server / Infrastructure
• Location: Frankfurt, Germany (DE-HE)
• Registration: ARIN registry

## Network Profile

The IP operates as a legitimate load balancer endpoint for GitHub services, identified via PTR hostname `lb-140-82-121-3-fra.github.com`. Network role analysis confirms:

• Cloud Infrastructure: Active
• CDN/Proxy Services: Not detected
• Tor/VPN/Anycast: Negative indicators
• Mobile/Residential: Not applicable

## Service Exposure

• Port 80/TCP: HTTP (web traffic)
• Port 443/TCP: HTTPS (encrypted web traffic)
• Port 22/TCP: SSH (administrative access)
• TLS Certificate: github.com (Sectigo Public Server Authentication CA DV E36)
• Security Headers: HSTS enabled, HTTP/2 supported

## Threat Assessment

• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: N/A
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: No indicators detected
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False

## Network Neighborhood Analysis

Subnet 140.82.121.0/24 shows:

• Abuse Density: 0 (clean)
• Threat Siblings: 0
• Active Siblings: 1 (the subject IP)
• Classification: Clean

## Control Plane Validation

• BGP Prefix: 140.82.121.0/24
• Origin ASN: 36459 (GitHub, Inc.)
• Route Stability: Flagged as unstable
• DNSSEC: Valid
• CAA Records: Present
• DNSBL Listings: 0/8 lists

## Historical Signal Analysis

22 observations tracked since 2026-07-29. Consistent patterns observed:

• Ownership Stability: No changes detected
• Threat Persistence: None
• Network Classification: Consistently marked as "clean"
• Operator Score: 0.3478 (Basic)
• Inherited Risk: 0

## Relationship Mapping

19 relationship entries identified:

• Same Network Associations: Multiple entries linking to GITHU network
• DNS Associations: Consistent mapping to `lb-140-82-121-3-fra.github.com`
• No Correlated Malicious Entities: None detected

## Recommended Security Actions

No specific firewall rules or blocking recommendations generated. The IP's risk profile (score: 0) and clean threat indicators support normal network operations.

Monitoring Recommendation: Continue standard traffic monitoring. No blocking or rate-limiting required at this time.

---

*Intel generated: [Current Date] | Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.