74.208.167.22📋 Copy

# IP INTELLIGENCE BRIEFING: 74.208.167.22

Classification: Low Risk / Infrastructure

Risk Score: 25/100

Generated: Based on current signal analysis

---

## EXECUTIVE SUMMARY

IP address 74.208.167.22/32 is associated with IONOS SE (ASN 8560) and located in Kansas City, Missouri, United States. The address maintains a low risk profile (score: 25) with no open services, firewalled configuration, and minimal threat indicators. Single DNSBL listing detected. No active threat campaigns or malicious behavior observed in recent observation history.

---

## TECHNICAL PROFILE

Ownership & Routing:

• Origin ASN: 8560 (IONOS SE)
• BGP Prefix: 74.208.0.0/16
• RIR Registration: Unavailable data
• Operator Score: 0.2609 (Basic classification)

Geolocation:

• Country: United States (US)
• Region: Missouri (MO)
• City: Kansas City
• Coordinates: 38.46°N, -92.29°W
• Geo Consensus: Validated across 2 sources

DNS Resolution:

• PTR Record: ip74-208-167-22.pbiaas.com
• Forward Resolution: Confirmed
• Hosted Domains: 0
• Email Authentication: SPF and DMARC configured

Network Services:

• Open Ports: None detected
• Service Status: Firewalled / No Services
• TLS Certificate: Not present
• HTTP Banner: Not available

---

## THREAT INDICATORS

Current Status:

• Is Tor Exit: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0 (DNSBL: 1/8 lists)
• Threat Indicators: None active
• Abuse Confidence Score: Not applicable
• Is Cloud/CDN/Proxy/VPN: No

Campaign Correlation:

• Cert Matches: 0
• Banner Matches: 0
• Correlated IPs: 0
• Campaign Likelihood: Not detected

---

## OBSERVATION HISTORY

Signal Count: 15 observations analyzed

Recent Activity Pattern:

• BGP routing signals consistent with IONOS SE infrastructure
• Geolocation signals consistently resolve to US/Missouri region
• Operator classification maintained at "Basic" level
• No ownership changes or persistent malicious behavior detected
• Threat persistence days: 0
• Is Persistently Malicious: No

Signal Breakdown:

• ASN 8560 routing communities observed
• Proxy/VPN classifications detected in proxycheck-io feed
• Alienvault-OTX signals showing has_threats flag (requires contextual analysis)
• Operator score remains stable at 0.2609

---

## NEIGHBORHOOD ANALYSIS

Subnet: 74.208.167.0/24

• Neighbor Count: 0
• Abuse Density: 0
• High/Medium/Low Risk Distribution: 0/0/0
• Threat Siblings: 0
• Inherited Risk: 0

No neighboring IPs with elevated risk detected in immediate /24 subnet.

---

## RELATIONSHIP GRAPH

Identified Associations:

• DNS: ip74-208-167-22.pbiaas.com (hostname association)

No additional organizational, subnet, or certificate relationships identified.

---

## RECOMMENDED ACTIONS

Current Risk Level: Low

Recommended Action: Monitor / Standard Logging

No immediate blocking or firewall rules recommended based on current risk profile. The IP maintains a benign infrastructure profile with no active threat indicators.

Monitoring Parameters:

• Watch for service port opening
• Monitor for DNSBL list additions
• Track BGP prefix changes
• Observe for new threat indicator matches

---

## ANALYST NOTES

The IP address 74.208.167.22 presents a standard enterprise infrastructure profile. The absence of open services, combined with the low risk score and lack of threat indicators, supports treating this as legitimate infrastructure. However, the single DNSBL listing warrants periodic review to ensure no new blacklisting occurs. Standard network logging and periodic re-verification are sufficient mitigation measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.