120.89.66.17📋 Copy

INTELLIGENCE BRIEFING: IP 120.89.66.17

Classification: MODERATE RISK | Date: Current | Jurisdiction: Bangladesh (BD)

---

**EXECUTIVE SUMMARY**

IP 120.89.66.17 is a web server infrastructure endpoint operating from Dhaka, Bangladesh under ASN 141474 (Trust Innovation Limited). The IP exhibits moderate risk scoring (40) with no active threat indicators, blacklist entries, or known malicious activity. The address functions as a standard web hosting service with HTTPS termination on port 443.

---

**OWNERSHIP & INFRASTRUCTURE**

• Organization: Trust Innovation Limited administrator
• AS Number: 141474
• Network Block: 120.89.64.0/22 (TRUST-BD)
• RIR: APNIC
• Geolocation: Dhaka, Dhaka Division, Bangladesh (23.73°N, 90.41°E)
• Service Type: Web Server

---

**THREAT ASSESSMENT**

Risk Score: 40/100 (Moderate)

Abuse Confidence Score: Not applicable

Blacklist Status: Not listed (0 DNSBL entries)

Known Threats: None detected

Threat Indicators:

• Not a known attacker
• Not a Tor exit node
• Not a spam source
• No active threat feeds associated
• No known campaigns correlated

---

**NETWORK BEHAVIOR**

Open Services:

• Port 443/TCP: HTTPS (web server)

DNS Configuration:

• No PTR record resolution
• No forward DNS resolution
• SPF: Not configured
• DMARC: Not configured
• TXT records: 0

Control Plane:

• Origin ASN: 141474
• BGP Prefix: 120.89.66.0/24
• Route stability: Stable
• DNSSEC: Valid

---

**NEIGHBORHOOD ANALYSIS**

Subnet: 120.89.66.17/24

• Classification: Clean
• Abuse Density: 0.0
• Risk Distribution: No high/medium/low risk neighbors detected
• Sibling IPs: 1 total (active)
• Threat Siblings: 0

The /24 subnet exhibits no elevated abuse patterns, indicating this IP operates in a clean network environment.

---

**OBSERVATION HISTORY**

Total observations recorded: 16

Recent Signal Summary (2026-07-29):

• Network classification signals observed with 30-40% confidence
• Ownership verification signals at 85% confidence (no ownership changes detected)
• Subnet analysis confirms clean classification with zero inherited risk
• Connection attempts: Failed (connection_failed error recorded)
• Port scanning activity detected on multiple ports
• Service fingerprinting incomplete (no TLS certificate, no HTTP title detected)

Temporal Analysis:

• No persistent malicious behavior observed
• Threat observation count: 0
• No ownership changes recorded

---

**RELATIONSHIPS**

Three network-level relationships identified:

• All relationships map to TRUST-BD network block
• No organization-level or hostname-level associations detected
• No certificate relationships

---

**RECOMMENDED ACTIONS**

Security Posture: No immediate blocking required

Monitoring Status: Continue standard monitoring

Firewall Rules: No specific iptables/nftables rules recommended at this time

SOC Analyst Notes:

This IP represents legitimate web hosting infrastructure with a moderate risk classification primarily due to geographic risk scoring from Bangladesh. The absence of threat indicators, clean neighborhood data, and stable network classification support continued monitoring without escalation. No immediate blocking or investigation is warranted unless specific attack indicators emerge in logs.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.