65.75.201.144📋 Copy

## IPDEBRIEF INTELLIGENCE BRIEFING

Target: 65.75.201.144/32

Date: 2026-07-31

Classification: Moderate Risk

---

EXECUTIVE SUMMARY

IP 65.75.201.144 is assigned to HostRush (ASN 62633, HOSTRUSH02) within the 65.75.201.0/24 block. The IP demonstrates moderate risk characteristics (Risk Score: 50) with no active threat indicators. The address is currently firewalled with no open services detected and zero observed malicious activity.

---

OWNERSHIP & REGISTRATION

• Organization: HostRush
• Network Name: HOSTRUSH02
• ASN: 62633
• Registry: ARIN
• CIDR Block: 65.75.201.0/24
• Abuse Contact: abuse@hostrush.com

---

GEOLOCATION ANALYSIS

• Claimed Location: Dallas, Texas, United States
• Geographic Validation: FAILED — Traceroute analysis indicates geolocation data is unreliable. Measured RTT of 52ms is below the minimum possible 159.9ms for the claimed distance of 7,997km, indicating the reported coordinates are inaccurate.
• Geo Consensus: Multiple sources converge on US region despite coordinate discrepancy.

---

THREAT INDICATORS

• Blacklist Count: 0 (clean)
• Known Campaigns: None identified
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not available
• DNSBL Listings: 2 of 8 total lists (minor reputation impact)

---

NETWORK SERVICES & EXPOSURE

• Open Ports: None detected
• HTTP Services: No active web services
• TLS Certificate: Not exposed
• Network Role: Classified as "Firewalled / No Services"
• Infrastructure Type: Provider/Hosting unclear
• Cloud/CDN/VPN: No indicators

---

SUBNET ANALYSIS (65.75.201.0/24)

• Subnet Classification: Clean
• Abuse Density: 0%
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Inherited Risk: 0

---

OBSERVATION HISTORY (16 signals collected)

Recent activity shows:

• Apache/2.4.62 (AlmaLinux) banner detected in historical scans
• Multiple ownership and ASN signals confirming HostRush attribution
• No evidence of persistent malicious behavior
• Threat persistence days: 0

---

RELATIONSHIP GRAPH

• Same Network References: 2 entries pointing to HOSTRUSH02
• No cross-organization or hostname relationships detected

---

SECURITY RECOMMENDATIONS

1. Block at Firewall: IP is classified as Moderate Risk with DNSBL listings. Implement deny rule for 65.75.201.144/32.

2. Monitor Subnet: The entire 65.75.201.0/24 block shows clean status but warrants ongoing monitoring.

3. Geolocation Caution: Do not rely on claimed Dallas, TX location for geofencing decisions.

4. Actionable Rule: `iptables -A INPUT -s 65.75.201.144/32 -j DROP`

---

CONCLUSION

This IP address poses moderate risk due to DNSBL listings but demonstrates no active malicious behavior. The address is properly attributed to HostRush infrastructure with no observed threats. SOC teams may monitor but immediate blocking is recommended pending further investigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.