# 153.75.89.191 — IP Intelligence Summary

153.75.89.191 is an IPv4 address operated by Cloudzy AI ASN (AS14956), geolocated to Boston, United Arab Emirates. As of August 29, 2026, IPDebrief rates it Moderate Risk (49/100) and identifies it as a Tor exit node.

- Canonical page: https://ipdebrief.com/153.75.89.191
- Last updated: 2026-08-29

## Ownership

- Organization: Cloudzy AI ASN
- Network name: AE-CLOUDZY-19910923
- Allocated block: 153.75.80.0/20
- ASN: AS14956 (https://ipdebrief.com/asn/14956)
- Regional registry: APNIC

## Location

- City: Boston
- Region: —
- Country: United Arab Emirates
- Time zone: Asia/Dubai

## Network classification

- Infrastructure type: Unknown
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: yes
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (49/100)
- Blocklist listings: 1
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

**IP INTELLIGENCE BRIEFING: 153.75.89.191**

**Classification:** Tor Exit Node / Moderate Risk (Score: 59)

\---

**EXECUTIVE SUMMARY**

IP 153.75.89.191 is classified as a Tor exit node operating from the UAE. The address exhibits moderate risk characteristics with blacklist presence and active threat indicators. Neighborhood analysis shows 1 threat sibling within the /24 subnet, indicating localized abuse activity.

\---

**OWNERSHIP & GEOSPATIAL DATA**

\- **Organization:** Cloudzy AI ASN (ASN: 14956)

\- **Network Block:** 153.75.80.0/20

\- **Geolocation:** United Arab Emirates (AE), Dubai region

\- **Coordinates:** 23.42°N, 53.85°E

\- **BGP Route:** 153.75.89.0/24 via AS293 → AS137409 → AS49127 → AS14956

\- **Route Stability:** Unstable (2 route changes in 30 days)

\---

**THREAT INDICATORS**

\- **Tor Exit Node:** Confirmed active

\- **Blacklist Status:** Listed on 1 of 8 DNSBL feeds

\- **Threat Feeds:** No known campaign attribution

\- **Abuse Confidence:** Not classified as known attacker or spam source

\- **SSH Service:** Port 22 (TCP) exposed with OpenSSH 10.3 banner

\---

**NETWORK CONTEXT**

\- **Subnet Classification:** Mostly Clean (Abuse Density: 0.5)

\- **Threat Siblings:** 1 of 2 active siblings in /24 subnet

\- **Neighbor Risk:** 153.75.89.150 (Risk Score: 0)

\- **Control Plane Operator Score:** 0.1304 (Minimal)

\- **DNSSEC:** Valid

\---

**OBSERVATION HISTORY**

\- **Total Observations:** 76 signals tracked

\- **Recent Activity:** Multiple high-severity blacklist listings observed on July 29, 2026

\- **Threat Persistence:** Single observation window (0 threat persistence days)

\- **Temporal Trend:** No persistent malicious behavior detected

\---

**RECOMMENDED ACTIONS**

1. **Block at perimeter:** Consider blocking SSH (port 22) from this IP

2. **Monitor:** Track for Tor exit node activity patterns

3. **Whitelist Evaluation:** Assess business need for this traffic; Tor exit nodes may be used for legitimate privacy purposes

4. **Neighbor Monitoring:** Monitor 153.75.89.150 for potential correlated activity

\---

**INTELLIGENCE NOTES**

This IP operates within a Cloudzy AI infrastructure but exhibits Tor exit node characteristics. The presence on multiple DNSBL feeds with high severity classifications warrants attention in SOC monitoring. Route instability and limited email authentication records (no SPF/DMARC) suggest infrastructure may be temporary or misconfigured.

## Nearby addresses

- 153.75.89.150 (https://ipdebrief.com/153.75.89.150)

---

Source: IPDebrief, "153.75.89.191 IP intelligence", https://ipdebrief.com/153.75.89.191, updated 2026-08-29. Assessments are probabilistic.