84.239.10.114📋 Copy

# IP Intelligence Briefing: 84.239.10.114/32

## Executive Summary

Target IP 84.239.10.114 is assessed as LOW RISK (risk score: 25). The IP shows no active malicious indicators, no open services, and no blacklist presence. However, the associated /24 subnet demonstrates elevated abuse density (0.8), indicating potential contextual risk from neighboring addresses.

---

## Technical Profile

Ownership & Network Context

• ASN: 212238 (INVITE Systems)
• Organization: INVITE Systems
• RIR: RIPE
• Network: BINBOX-Nashville (hosting infrastructure)
• Location: Nashville, Tennessee, United States (geolocation confidence: 0.28, accuracy: 3,750km)
• CIDR Block: 84.239.10.0/24

Service Status

• Open Ports: None detected
• DNS Records: No PTR hostnames; forward resolution: 0 records
• Email Reputation: No SPF/DMARC records detected
• TLS/Certificates: None
• HTTP Services: None active
• Classification: Firewalled / No Services

Threat Indicators

• Reputation: Low Risk
• Blacklist Status: 0 blacklists; 1 DNSBL listing out of 8 total lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Affiliation: None identified

---

## Neighborhood Analysis

The target resides in subnet 84.239.10.0/24 with the following characteristics:

• Abuse Density: 0.8 (elevated)
• Classification: mostly_clean
• Inherited Risk: 10
• Total Siblings: 5; Active Siblings: 5; Threat Siblings: 4

Neighbor Risk Distribution:

• 84.239.10.8: Risk Score 25, Authority Score 50
• 84.239.10.15: Risk Score 25, Authority Score 50
• 84.239.10.18: Risk Score 25, Authority Score 50
• 84.239.10.94: Risk Score 25, Authority Score 50

All neighboring IPs maintain low risk scores but the subnet-level abuse density suggests coordinated or adjacent infrastructure activity.

---

## Historical Signal Timeline

Total Observations: 17 signals tracked

Recent Observations (2026-06-18):

• Subnet abuse density: 0.8 (consistent)
• Classification: mostly_clean
• Inherited risk: 10
• Ownership changes: 0
• Threat persistence days: 0
• Is persistently malicious: false

The IP demonstrates no temporal escalation in risk profile and no ownership history changes.

---

## Network Relationships

All 14 identified relationships map to "Same Network" → BINBOX-Nashville. This confirms the IP operates within a BINBOX hosting infrastructure cluster in Nashville.

---

## Recommended Security Actions

Risk Score: 25 (Low)

Action Status: No specific recommendations generated at this time. The IP does not warrant immediate blocking or allow-listing based on current risk profile.

Monitoring Priority: MEDIUM

• Monitor for service activation (new open ports, DNS changes)
• Track subnet-level abuse density trends
• Watch for correlation with neighboring threat siblings

---

## SOC Analyst Notes

1. Block/Allow: Not recommended; risk score below intervention threshold

2. Log Monitoring: Enable logging for connection attempts; no immediate threat

3. Subnet Context: Be aware of 4 threat-adjacent siblings in the same /24

4. Infrastructure Type: BINBOX-Nashville hosting environment; typical of web/application hosting

5. No Active Threats: No malware, botnet, or scanning activity observed

Confidence Level: High (data sources consistent)

Last Updated: 2026-06-18

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.