134.19.179.179📋 Copy

# IP Intelligence Briefing: 134.19.179.179/32

Date: 2026-07-29

Classification: Moderate Risk

Analyst: IPDebrief Intelligence Team

## Executive Summary

IP address 134.19.179.179 is assigned to Global Layer (ASN 49453), a network infrastructure provider. The IP carries a moderate risk score of 40/100 and shows DNSBL listings on 2 of 8 threat feeds. No active malicious indicators detected, but the IP should be blocked due to risk profile and control plane anomalies.

## Profile Analysis

Ownership & Network Role:

• ASN: 49453 (Global Layer)
• Organization: Global Layer
• CIDR Block: 134.19.179.0/24
• RIR: ARIN
• Service Purpose: Firewalled / No Services Detected
• Network Type: Infrastructure (not cloud/CDN/VPN/proxy)

Geolocation:

• Primary: London, GB (Europe/London timezone)
• Secondary Signal: Alblasserdam, NL (data conflict observed in history)
• Geo Validation: Plausible = false (distance anomalies detected)

DNS Configuration:

• PTR Record: connected-by.global-layer.com
• Forward Resolution: Not confirmed
• Email Auth: SPF and DMARC records present
• Domain: global-layer.com

Threat Indicators:

• Risk Score: 40/100 (Moderate)
• Blacklist Count: 0
• DNSBL Listings: 2/8 total lists
• Abuse Confidence: Not scored
• Known Attacker: No
• Spam Source: No
• Tor Exit: No
• Known Campaigns: None identified

## Control Plane Assessment

BGP/Routing:

• Origin ASN: 49453
• BGP Prefix: 134.19.179.0/24
• Route Stability: False (route changes observed)
• RPKI State: Not validated
• IRR Consistency: Not verified
• Route Changes (30d): 0
• Is Route Stable: False

DNSSEC: Valid

Operator Score: 0.1304 (Minimal)

## Historical Observations

Observation Count: 13 signals

Recent Signals (2026-07-29):

• ASN/Organization data: ARIN, Global Layer (90% confidence)
• Geolocation data: NL (Alblasserdam), GB (London) - conflicting signals
• DNSBL listings: 2 lists flagged (85% confidence)
• Operator score: Minimal (60% confidence)
• Overall risk dimensions: Partial coverage (12% confidence)

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Persistently malicious: No
• Threat observation count: 0

## Neighborhood Analysis

Subnet: 134.19.179.0/24

Neighbor Count: 10 detected siblings

Abuse Density: 0

Risk Distribution:

• High risk: 0
• Medium risk: 0
• Low risk: 10

Notable Neighbors:

• 134.19.179.147: Risk score 25 (only elevated neighbor)
• All other neighbors: Risk score 0 (authority score 50)

## Relationships

• Same Network: GLOBALLAYER
• DNS Association: connected-by.global-layer.com

## Recommended Actions

Blocking Recommendations:

Assessment Notes:

• No open ports or services detected
• Risk score warrants blocking despite lack of active threat indicators
• Route instability flag suggests monitoring for prefix changes
• DNSBL listings on 2 feeds indicate potential reputation issues

## Intelligence Assessment

This IP represents a moderate-risk infrastructure address with no active malicious services. The primary concern stems from DNSBL listings and control plane anomalies (route instability, geo-validation failures). While neighborhood analysis shows the subnet is generally clean, the target IP should be blocked based on its risk profile and control plane issues.

Priority: Medium

Action: Block inbound traffic

Monitoring: Track route changes and DNSBL updates

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.