64.89.160.132📋 Copy

IP INTELLIGENCE BRIEFING

Target: 64.89.160.132/32

Date: 2026-06-23

Classification: LOW RISK

---

**EXECUTIVE SUMMARY**

IP 64.89.160.132 belongs to Ghosty Networks LLC (ASN 205759) within the 64.89.160.0/23 CIDR block. Current risk assessment indicates low risk (score: 25/100) with no active threat indicators. The IP presents as a firewalled infrastructure address with no publicly accessible services.

---

**OWNERSHIP & REGISTRATION**

• Organization: Ghosty Networks LLC
• AS Number: 205759 (GHOSTY-NETWORKS-LU)
• CIDR Block: 64.89.160.0/23
• RIR: ARIN
• Geolocation: US (consensus: 1 source)
• Ownership Stability: No recent ownership changes detected

---

**THREAT ASSESSMENT**

• Risk Score: 25/100 (LOW)
• Abuse Confidence Score: Not applicable
• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Status: 0 blacklist entries
• DNSBL Listings: 1/8 lists (minimal presence)
• Threat Persistence: 0 days (not persistently malicious)

---

**NETWORK CHARACTERISTICS**

• Service Status: Firewalled / No Services
• Open Ports: None detected
• TLS Certificates: None
• DNS Resolution: No PTR records, no reverse DNS
• Email Authentication: No SPF/DMARC records configured
• Cloud/CDN/VPN/Proxy: Not classified in any of these categories
• Infrastructure Type: Private/Internal

---

**SUBNET ANALYSIS (64.89.160.0/24)**

• Abuse Density: 26.92% (moderate)
• Network Classification: Mixed
• Total Subnet IPs: 29
• Risk Distribution: 1 high-risk, 22 medium-risk, 6 low-risk
• Notable High-Risk Neighbors: 64.89.160.43 (80), 64.89.160.120 (70), 64.89.160.225 (70)

Assessment: The subnet exhibits moderate abuse activity. The target IP shows no correlation with neighboring threat actors.

---

**OBSERVATION HISTORY**

• Total Observations: 16 signals across observation period
• Latest Observation: 2026-06-23
• Risk Trend: Stable/Minimal risk across all observations
• Geolocation Changes: Consistent US attribution
• Network Role: Persistent classification as firewalled infrastructure

---

**RELATIONSHIP ANALYSIS**

• Primary Associations: GHOSTY-NETWORKS-LU network block
• External Relationships: None identified
• Associated Hostnames: None
• Linked Certificates: None
• Organizational Links: None

---

**RECOMMENDED ACTIONS**

Based on current risk profile (score: 25), no specific firewall rules or blocking recommendations are generated. The IP presents minimal threat to defensive security operations.

Suggested Monitoring: Continue passive observation; no immediate action required.

---

**INTELIGENCE CONCLUSION**

IP 64.89.160.132 is a low-risk, firewalled infrastructure address belonging to Ghosty Networks LLC. No malicious indicators, threat campaigns, or active exploitation signatures were observed. The subnet shows moderate abuse density but the target IP remains isolated from known threat actors. SOC analysts may monitor but no immediate defensive action is warranted.

Classification: LOW RISK

Confidence Level: HIGH

Next Review: Routine monitoring recommended

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.