180.189.174.146📋 Copy

IP Intelligence Briefing: 180.189.174.146

*Generated via IPDebrief Tools*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Geolocation: Denver, Colorado, US (geo-plausible: false)
• Ownership: Registered to Timor-Telecom-ISP (APNIC) with abuse contact `abuse@timortelecom.tl`.
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services detected).
• Control Plane:

- Subnet: `180.189.174.0/24` (ASN 38077).

- BGP: Route stable (0 changes in 30 days), DNSSEC valid.

- DNSBL Listings: 2/8 total lists (high-risk sources).

---

**2. Threat & Behavior**

• Threat Indicators: No direct malicious indicators (no malware, phishing, or campaign matches).
• Historical Observations:

- 10 signals recorded (last 30 days).

- Mixed confidence: 0.12–0.95.

- DNSBL listings (2/8) and low operator risk score (0.13).

• Behavioral Flags: No honeypot hits, enumeration strikes, or WAF violations.

---

**3. Relationships & Neighborhood**

• Linked Entities: No relationships or subnets identified.
• Subnet Context:

- `/24` subnet (`180.189.174.0/24`) has 0 abuse density.

- No neighboring IPs flagged as active or malicious.

---

**4. Recommendations**

• Monitor: Track DNSBL listings and verify ownership legitimacy.
• Investigate: Discrepancy between geolocation (Denver, US) and registration (Timor-Leste).
• Blocklist: Consider adding to DNSBL filters due to high-risk listings.
• Network Segmentation: Ensure firewalled isolation given no services detected.

---

*End of Briefing*

*Generated from IPDebrief full profile, history, and subnet analysis.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.