199.232.69.194📋 Copy

# IP Intelligence Briefing: 199.232.69.194

Date: 2026-07-30

IP Address: 199.232.69.194/32

Classification: Low Risk CDN Infrastructure

---

## Executive Summary

IP 199.232.69.194 is a Content Delivery Network (CDN) address owned by Fastly, Inc. (ASN 54113). The address presents a low risk profile (risk score: 25/100) with no active threat indicators. The IP is classified as legitimate CDN infrastructure serving web traffic over HTTP/HTTPS.

---

## Technical Profile

Ownership and Network

• Organization: Fastly, Inc.
• ASN: 54113
• Network Name: SKYCA-3
• CIDR Block: 199.232.0.0/16
• RIR: ARIN
• Registration: Commercial CDN infrastructure

Geolocation Data

• Country: United States (US)
• Region: Missouri (MO)
• City: St Louis
• Coordinates: 38.63°N, -90.2°W
• Timezone: America/Chicago

*Note: Geo-validation indicates a 7116km distance discrepancy with reported RTT of 42ms (minimum possible: 142.3ms), suggesting geolocation data may require verification.*

Network Classification

• Infrastructure Type: CDN
• Service Purpose: Web Server
• Provider: Fastly
• Anycast: No
• Cloud: No
• Proxy/VPN/Tor: No

---

## Threat Assessment

Risk Indicators

• Overall Risk Score: 25/100 (Low Risk)
• Abuse Confidence Score: Not reported
• Blacklist Count: 0
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Control Plane Indicators

• BGP Prefix: 199.232.68.0/22
• Route Stability: False
• DNSSEC Valid: Yes
• DNSBL Listed: 1 out of 8 total lists
• Operator Score: 0.1304 (Minimal)

Services and Ports

• Open Port 80/TCP: HTTP
• Open Port 443/TCP: HTTPS
• Server Banner: Varnish
• TLS Certificate: GlobalSign Atlas R3 DV TLS CA 2026 Q2

- Subject: *.freetls.fastly.net

- SANs: *.freetls.fastly.net, *.global.ssl.fastly.net

---

## Observation History (18 Records)

Recent observations (2026-07-29 to 2026-07-30) show:

• Abuse Density: 0 (clean)
• Threat Persistence: 0 days
• Persistent Malicious Activity: No
• Last HTTP Response: Status 421 (Malicious Request)
• Ownership Changes: 0

The IP has maintained a stable, low-risk profile with no observed malicious behavior over the observation period.

---

## Neighborhood Analysis

Subnet: 199.232.69.194/24

• Active Siblings: 1
• Threat Siblings: 0
• Abuse Density: 0
• Classification: Clean
• Risk Distribution: No high or medium risk neighbors

---

## Relationships

• Network Affiliation: SKYCA-3 (Fastly)
• Related Entities: 5 relationships detected (all same-network classifications)

---

## Recommended Actions

No specific firewall or blocking actions are recommended at this time. The IP represents legitimate CDN infrastructure with a low risk profile. However, SOC analysts should:

1. Allow traffic through standard CDN policies

2. Monitor for any changes in behavior or reputation

3. Verify the geolocation discrepancy if traffic patterns suggest geographic inconsistency

4. Correlate with other Fastly infrastructure for broader context

---

## Conclusion

IP 199.232.69.194 is legitimate Fastly CDN infrastructure with no current threat indicators. The low risk score (25/100), clean neighborhood, and absence of malicious activity support continued operation. The single DNSBL listing warrants periodic monitoring but does not indicate immediate threat. No blocking or mitigation actions are currently indicated.

Status: Monitor (No Immediate Action Required)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.