195.177.94.75📋 Copy

INTELLIGENCE BRIEFING: 195.177.94.75/32

Classification: Low Risk - Monitoring Recommended

Executive Summary:

IP address 195.177.94.75 is associated with GBTCloud infrastructure (ASN 214961, Pitline Ltd). The IP currently maintains a low-risk profile (Risk Score: 25/100) with no active threat indicators, but exhibits geographic inconsistencies and shares risk characteristics with three neighboring IPs in the 195.177.94.0/24 subnet.

---

Current Profile Assessment:

---

Geographic Intelligence:

• Primary Location: United States (Miami, FL) per current profile
• Historical Discrepancies:

- Marseille, France (EU) observed in recent history

- Ukraine (AS7029 Windstream Communications) flagged with threat indicators

• Geographic Consensus: False (multiple conflicting geolocations)

Anomaly Detection: The IP's geographic footprint shows inconsistent reporting across different geolocation sources, which may indicate routing manipulation, hosting infrastructure with mismatched records, or data quality issues in upstream databases.

---

Network Neighborhood Analysis:

Subnet: 195.177.94.0/24

• Total Neighbors: 6
• Abuse Density: 0%
• Risk Distribution: 6 Low Risk / 0 Medium / 0 High

High-Risk Correlates: None in immediate subnet

• Three neighbors (195.177.94.61, 195.177.94.114, 195.177.94.142) share the same risk score of 25
• Remaining neighbors show no risk activity

---

Relationship Graph:

• Network Associations: 2 entries (GBTCloud)
• DNS Associations: 2 entries (75.94.177.195.in-addr.arpa)
• No certificate associations or organizational links detected

---

Threat Indicators:

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Known Campaigns: None
• Historical Threat Observations: 0
• Threat Persistence: 0 days
• BGP Stability: False (route stability issues)

---

Historical Observation Summary:

• Total Observations: 16 signals recorded
• Most Recent Activity: 2026-07-27
• Signal Types: Geolocation, ASN routing, network classification, control plane data
• Notable Signal: One historical observation (confidence 0.75) flagged AS7029 Windstream Communications with Ukraine location and threat indicators

---

Recommended Actions:

1. Monitor Geographic Discrepancies: The conflicting geolocation data (US vs EU vs UA) warrants ongoing observation. Monitor for pattern changes in routing or location reporting.

2. Subnet-Level Assessment: The 195.177.94.0/24 subnet shows low overall abuse density. Consider blocking the three correlated IPs (195.177.94.61, 195.177.94.114, 195.177.94.142) if they exhibit suspicious behavior.

3. Control Plane Monitoring: Route stability is flagged as false. Monitor for BGP prefix changes or route hijacking attempts.

4. Default Allow Policy: Given the low-risk profile and no active services, maintain default-allow policy with logging.

5. No Immediate Blocking: No actionable firewall rules generated. The IP presents minimal threat at current observation levels.

---

Conclusion:

IP 195.177.94.75 represents a cloud infrastructure endpoint with a low-risk posture. Geographic inconsistencies should be tracked but do not currently indicate malicious activity. The subnet environment is clean with no abuse density. Recommend continued monitoring rather than immediate defensive action.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.