IP Intelligence Briefing: 192.3.139.141
Date: 2026-06-17
---
**Risk Profile**
- Risk Score: 25 (Low Risk)
- Provider: ColoCrossing (ASN 36352)
- Geolocation: Buffalo, NY, US (ARIN-registed)
- Threat Indicators: No malicious activity, no known attackers, no spam sources, or DNSBL listings.
- Network Role: Firewalled server with no open ports or services detected.
---
**Observation History**
- Latest Scan: June 2026
- Signals: Minimal risk (operator score 0.13), no open ports, no TLS/HTTP services, and no DNS anomalies.
- Stability: Route stability score indicates potential instability (isRouteStable: false).
- Historical Trends: No persistent malicious activity; threat observation count is 1.
---
**Relationships**
- Network: Linked to subnet 192.3.139.0/24 (ColoCrossing).
- DNS: Associated with hostname 192-3-139-141-host.colocrossing.com (PTR record confirmed).
- Ownership: Owned by ColoCrossing (ARIN-registed, abuse contact available).
---
**Neighborhood Analysis**
- Subnet: 192.3.139.0/24 (abuse density: 0, classified as "mostly_clean").
- Neighbors:
- 192.3.139.88: Risk score 25, authority score 50 (low risk but higher authority).
- No other active or malicious sibling IPs detected.
---
**Actionable Insights**
- No Immediate Threat: The IP shows no signs of malicious activity, but its route stability is questionable.
- Monitor Subnet: While the subnet is clean, the neighbor 192.3.139.88 has a higher authority score, warranting closer scrutiny.
- Verify DNS: Confirm DNSSEC validity and ensure no unintended DNS associations.
- Firewall Rules: Consider allowing traffic only from trusted sources, given the IPβs firewalled state.
---
Conclusion: 192.3.139.141 is a low-risk, data-center-hosted IP with no malicious indicators. However, monitor route stability and subnet activity for anomalies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | ColoCrossing |
| ASN | AS36352 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 192-3-139-141-host.colocrossing.com |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 192-3-139-141-host.colocrossing.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 21% | 2 | 2 |
| Overall | 20% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-07 23:04:04 UTC |
| Last Seen | 2026-06-23 02:44:38 UTC |
| Profile Built | 2026-06-23 02:46:49 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.