153.75.89.191
153.75.89.191 is an IPv4 address operated by Cloudzy AI ASN (AS14956), geolocated to Boston, United Arab Emirates. As of August 29, 2026, IPDebrief rates it Moderate Risk (49/100) and identifies it as a Tor exit node.
IP INTELLIGENCE BRIEFING: 153.75.89.191
Classification: Tor Exit Node / Moderate Risk (Score: 59)
---
EXECUTIVE SUMMARY
IP 153.75.89.191 is classified as a Tor exit node operating from the UAE. The address exhibits moderate risk characteristics with blacklist presence and active threat indicators. Neighborhood analysis shows 1 threat sibling within the /24 subnet, indicating localized abuse activity.
---
OWNERSHIP & GEOSPATIAL DATA
- Organization: Cloudzy AI ASN (ASN: 14956)
- Network Block: 153.75.80.0/20
- Geolocation: United Arab Emirates (AE), Dubai region
- Coordinates: 23.42°N, 53.85°E
- BGP Route: 153.75.89.0/24 via AS293 → AS137409 → AS49127 → AS14956
- Route Stability: Unstable (2 route changes in 30 days)
---
THREAT INDICATORS
- Tor Exit Node: Confirmed active
- Blacklist Status: Listed on 1 of 8 DNSBL feeds
- Threat Feeds: No known campaign attribution
- Abuse Confidence: Not classified as known attacker or spam source
- SSH Service: Port 22 (TCP) exposed with OpenSSH 10.3 banner
---
NETWORK CONTEXT
- Subnet Classification: Mostly Clean (Abuse Density: 0.5)
- Threat Siblings: 1 of 2 active siblings in /24 subnet
- Neighbor Risk: 153.75.89.150 (Risk Score: 0)
- Control Plane Operator Score: 0.1304 (Minimal)
- DNSSEC: Valid
---
OBSERVATION HISTORY
- Total Observations: 76 signals tracked
- Recent Activity: Multiple high-severity blacklist listings observed on July 29, 2026
- Threat Persistence: Single observation window (0 threat persistence days)
- Temporal Trend: No persistent malicious behavior detected
---
RECOMMENDED ACTIONS
1. Block at perimeter: Consider blocking SSH (port 22) from this IP
2. Monitor: Track for Tor exit node activity patterns
3. Whitelist Evaluation: Assess business need for this traffic; Tor exit nodes may be used for legitimate privacy purposes
4. Neighbor Monitoring: Monitor 153.75.89.150 for potential correlated activity
---
INTELLIGENCE NOTES
This IP operates within a Cloudzy AI infrastructure but exhibits Tor exit node characteristics. The presence on multiple DNSBL feeds with high severity classifications warrants attention in SOC monitoring. Route instability and limited email authentication records (no SPF/DMARC) suggest infrastructure may be temporary or misconfigured.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloudzy AI ASN |
| ASN | AS14956 |
| Network Name | AE-CLOUDZY-19910923 |
| CIDR Block | 153.75.80.0/20 |
| RIR | APNIC |
| Country | AE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS14956 |
| Network Prefix | 153.75.89.0/24 |
| Route mapping | Found |
| RPKI Status | Valid |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 60% | 2 | 28 |
| routing | 35% | 3 | 4 |
| services | 23% | 2 | 2 |
| ownership | 37% | 3 | 7 |
| reputation | 26% | 1 | 3 |
| geolocation | 34% | 2 | 3 |
| Overall | 36% | 13 | 47 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 21:35:17 UTC |
| Last Seen | 2026-10-05 07:27:01 UTC |
| Profile Built | 2026-08-29 11:45:30 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 153.75.89.191
Who owns the IP address 153.75.89.191?
153.75.89.191 is registered to Cloudzy AI ASN. The address falls within the 153.75.80.0/20 network block. Registration is held at APNIC.
Where is 153.75.89.191 located?
Geolocation data places 153.75.89.191 in Boston. The local time zone is Asia/Dubai. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 153.75.89.191 malicious or safe?
153.75.89.191 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.