109.105.209.14📋 Copy

# IP Intelligence Briefing: 109.105.209.14/32

Date: [Current Date]

Status: Active Monitoring

Risk Classification: Low Risk

---

## Executive Summary

IP address 109.105.209.14 is associated with internet-census.org infrastructure (ICG-ZEN-LAX-1 network). The address presents a low-risk profile (risk score: 30) with no active threat indicators. The subnet exhibits mixed risk characteristics, warranting contextual awareness for defensive monitoring.

---

## Technical Profile

Ownership & Network:

• ASN: 21859 (Abuse-C Role)
• Netname: ICG-ZEN-LAX-1
• CIDR Block: 109.105.209.0/24
• RIR: ARIN

Geolocation:

• Primary: United States, MA (Massachusetts)
• Coordinates: 42.41°N, -71.38°W
• Timezone: America/New_York
• Geographic confidence: Low to moderate (multiple signal sources)

DNS & Hostname:

• PTR Record: zl-laxk-us-gp1-wk133c.internet-census.org
• Forward Resolution: Confirmed
• Hosted Domain Count: 0

Network Services:

• Open Ports: None detected
• TLS Certificate: None
• Service Banner: None
• Classification: Firewalled / No Services

---

## Threat Assessment

Current Risk Indicators:

• Risk Score: 30 (Low Risk)
• Abuse Confidence: None
• Known Attack Source: False
• Spam Source: False
• Tor Exit Node: False
• Blacklist Count: 0 (current)
• DNSBL Listings: 2 of 8 total lists

Temporal Analysis:

• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: False
• Ownership Changes: 0

---

## Neighborhood Analysis

Subnet: 109.105.209.0/24

• Total Sibling IPs: 12
• Abuse Density: 16.7%
• Risk Distribution: High (2), Medium (3), Low (5)

Notable Neighbors:

---

## Relationship Graph

Associated Entities:

• Network: ICG-ZEN-LAX-1 (Multiple associations)
• Hostname: zl-laxk-us-gp1-wk133c.internet-census.org (DNS association)
• BGP Prefix: 109.105.209.0/24

---

## Observation History

Total Signals Tracked: 15

Recent Activity: July 24, 2026

Key Observations:

• Geolocation signals show inconsistencies (US and PT signals detected)
• Signal confidence ranges: 0.28–0.85
• Multiple provider/network classification signals (cloud, CDN, proxy, etc.): All negative
• Operator classification: Basic (score: 0.2609)

---

## Recommended Actions

Firewall Rules:

• No blocking recommended at this time
• Monitor for service changes if previously inactive

SOC Monitoring:

• Track subnet-level activity (109.105.209.0/24)
• Watch for elevated risk scores in neighboring IPs
• Monitor for new DNS associations or service launches

Threat Intelligence:

• No immediate threat action required
• Consider contextual analysis if related to known campaigns
• Maintain baseline for comparison

---

## Conclusion

109.105.209.14 is infrastructure associated with internet-census.org monitoring services. The address demonstrates low-risk characteristics with no active threat indicators. The subnet's 16.7% abuse density warrants periodic review, particularly for neighbors exhibiting high-risk scores (80, 55, 40). No immediate defensive action required; maintain monitoring context.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.