107.189.29.135📋 Copy

IP Intelligence Briefing: 107.189.29.135

Date: 2026-06-10

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Registered to FranTech Solutions (ASN 53667).
• Geolocation: US, Luxembourg (latitude/longitude unspecified).
• Network Role: Hosting provider (multi-service host).
• Services:

- Open ports: HTTP (80/tcp), SSH (22/tcp).

- SSH banner: `SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.11`.

- HTTP server: `nginx/1.24.0 (Ubuntu)`.

---

**2. Threat & Observation History**

• Threat Indicators: No malware, spam, or known attacker activity.
• Subnet Abuse Density: 0.75 (moderate risk in sibling IPs).
• Recent Observations (last 30 days):

- Stable hosting provider classification.

- Subnet abuse density increased to 0.75 (18 observations).

- No persistent malicious activity detected.

---

**3. Network Relationships**

• Shared Network: Part of PONYNET-11 (ASN 53667).
• Neighbors (107.189.29.0/24):

- 107.189.29.5: Risk 25 (low).

- 107.189.29.8: Risk 59 (medium).

- 107.189.29.184: Risk 59 (medium).

• Abuse Density: 0% (clean subnet).

---

**4. Actionable Insights**

• Monitor Subnet: Neighbors with medium risk (59) may require closer scrutiny.
• SSH/HTTP Services: Ensure SSH keys are secured and HTTP traffic is monitored for anomalies.
• Hosting Role: Verify compliance with hosting provider policies, as the IP hosts multiple services.
• Geolocation Discrepancy: US registration but Luxembourg city field; investigate potential misconfigurations.

---

Recommendation:

• Add 107.189.29.135 to monitoring lists with focus on SSH and HTTP traffic.
• Investigate neighbors with higher risk scores (e.g., 107.189.29.8/184) for potential lateral movement.
• Validate geolocation data and ensure no misconfigured services are exposed.

Source: IPDebrief Threat Intelligence Platform.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.