107.189.1.175📋 Copy

IP Intelligence Briefing: 107.189.1.175

Date: 2026-06-09

---

**1. IP Profile**

• Risk Score: 59/100 (Moderate Risk)
• Provider: Tor Exit Nodes (BuyVM)
• Geolocation: Luxembourg, US (2500 km accuracy radius)
• Ownership: ASN 53667 (BuyVM), registered with ARIN.
• Threat Indicators:

- Tor exit node detected.

- Flagged in 2 threat lists (high severity).

- No known attacker or spam source.

---

**2. Network Behavior**

• Services:

- Open ports: HTTP (80), HTTPS (443).

- TLS certificate: Issued to `tor.likogan.dev` (Let’s Encrypt).

• Network Role: Tor exit node, no CDN/VPN/mobile indicators.
• Subnet Analysis:

- /24 subnet (107.189.1.0/24): 3 active IPs, 2 with moderate risk.

- Subnet abuse density: 1/10 (mostly clean).

---

**3. Threat Observations**

• Historical Signals (Last 30 Days):

- 62 observations, including Tor exit activity and 2 high-severity threat list listings.

- No persistent malicious activity detected.

• Relationships:

- Linked to hostname `tor.likogan.dev` (DNS PTR confirmed).

- No direct connections to known malicious campaigns or organizations.

---

**4. Recommended Actions**

1. Block the IP:

- Add to firewall rules (iptables/nftables/Cloudflare WAF/AWS WAF).

- Example: `iptables -A INPUT -s 107.189.1.175 -j DROP`.

2. Monitor Subnet:

- Investigate neighbors (107.189.1.9, 107.189.1.160) with moderate risk scores.

3. Enhance Logging:

- Review traffic from this IP for unusual patterns (e.g., exfiltration, C2 attempts).

---

**5. Contextual Notes**

• Tor Exit Node: This IP is a known entry point for anonymized traffic, which may mask malicious activities.
• Subnet Risk: While the subnet has low overall abuse density, 2 of 3 neighbors are flagged, suggesting potential compromise.
• No Direct Malware: No indicators of malware distribution or phishing campaigns tied to this IP.

Next Steps: Validate DNS associations (tor.likogan.dev) and monitor for lateral movement within the subnet.

---

*Generated by IPDebrief. Use with operational security controls.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.