120.89.73.226📋 Copy

## IP Intelligence Briefing: 120.89.73.226/32

Classification: Moderate Risk

Report Date: Based on observations through July 2026

Analyst Assessment: Network infrastructure with moderate risk posture

---

Executive Summary

IP address 120.89.73.226 is registered to DEN Networks Limited (ASN 45184) within the 120.89.72.0/21 block in India. The address presents a moderate risk profile (score: 55) with no active threat indicators. Current analysis indicates the IP is firewalled with no services exposed.

---

Network Ownership & Registration

---

Risk Profile & Threat Indicators

Risk Score: 55 (Moderate Risk)

Abuse Confidence: No active threat indicators detected

Blacklist Status: Listed on 3 of 8 DNSBLs

Threat Indicators:

• Not identified as Tor exit node
• Not flagged as known attacker
• Not classified as spam source
• No active threat campaigns detected

Network Role: Provider infrastructure with firewall configuration blocking service enumeration

---

Service Exposure & Network Services

Open Ports: None detected

TLS Certificate: Not present

HTTP Services: No active web services

DNS Records: No forward resolution, no hosted domains

Assessment: The IP operates in a firewalled state with no publicly accessible services. This defensive posture limits attack surface exposure.

---

Control Plane & Routing

---

Temporal Analysis

Observation History: 11 signals recorded through July 2026

Threat Persistence: 0 days (no persistent malicious activity)

Ownership Stability: No ownership changes recorded

Threat Observation Count: 0

Behavioral Indicators:

• No honeypot hits
• No enumeration strikes
• No WAF violations
• Not currently active attacker

---

Subnet & Neighborhood Analysis

Subnet: 120.89.73.0/24

Abuse Density: 0 (low)

Neighbor Count: 1 identified neighbor (120.89.73.55)

Neighbor Risk Score: 55 (Moderate)

Risk Distribution: 1 medium risk neighbor

The /24 subnet shows minimal abuse activity with one neighboring IP sharing the same moderate risk score.

---

Relationships

Identified Connections:

• DEN-IN network relationship (same network designation)

No additional relationships to organizations, certificates, or related entities detected.

---

Recommended Security Actions

Based on the moderate risk profile and current threat posture:

1. Monitoring: Continue monitoring the IP for changes in service exposure or threat indicators

2. Firewall Rules: Standard egress rules apply; no blocking required absent active threat activity

3. Neighbor Awareness: Monitor 120.89.73.55 for correlated activity

4. DNSBL Review: Investigate listing reasons on 3 DNSBLs if inbound filtering is required

---

Intelligence Summary

IP 120.89.73.226 represents infrastructure owned by DEN Networks Limited with moderate risk characteristics. The address is not currently engaging in malicious activity but maintains a moderate risk score likely due to DNSBL listings and operator classification. No immediate threat response is warranted; maintain standard monitoring procedures and track for any changes in service exposure or behavioral patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.