171.75.9.189
IP 171.75.9.189 was observed between 2026-09-04 and 2026-09-11. Ownership was attributed to ASN 3356 under the organization LEVEL3-MNT within the 171.75.0.0/16 block. The address resolved to the PTR hostname ae1.3113.ear2.lon1.neo.colt.net via the colt.net domain. No open ports or active services were detected. The IP was not identified as a known attacker, spam source, or Tor exit node, and no blacklist entries were recorded.
Geolocation data indicated the United Kingdom, though multiple sources conflicted regarding the country. Routing data showed the prefix originated via ASN 3356 with an AS path of 2497 3356. The surrounding subnet (171.75.9.0/24) was classified as mostly clean with an abuse density of 0.0952. Behavioral analysis found no honeypot hits, enumeration strikes, or WAF violations.
Despite a low-risk reputation score, the profile was assigned a very low confidence level due to signal contradictions regarding geolocation and registry data. The operational recommendation was to monitor the address. No active campaign matches or correlated IPs were identified.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | LEVEL3-MNT |
| ASN | AS3356 |
| Network Name | UK-LVLT-19940225 |
| CIDR Block | 171.75.0.0/16 |
| RIR | APNIC |
| Country | GB |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ae1.3113.ear2.lon1.neo.colt.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ae1.3113.ear2.lon1.neo.colt.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 27% | 2 | 3 |
| services | 19% | 2 | 2 |
| ownership | 35% | 3 | 5 |
| reputation | 27% | 1 | 5 |
| geolocation | 33% | 2 | 4 |
| Overall | 30% | 12 | 25 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-04 14:37:37 UTC |
| Last Seen | 2026-09-20 10:58:27 UTC |
| Profile Built | 2026-09-22 23:28:36 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 40 |
Full dossier details are available via our API.