82.194.23.249📋 Copy

# INTELLIGENCE BRIEFING: IP Address 82.194.23.249

Classification: Low Risk

Report Date: Current

Analysis Scope: Full profile, history, relationships, and neighborhood assessment

---

## Executive Summary

IP address 82.194.23.249 is associated with enginet LLC (AS60258), a network operations organization based in Baku, Azerbaijan. The IP demonstrates low-risk characteristics (Risk Score: 25) with no active threat indicators. Current classification indicates "mostly_clean" subnet status. No immediate blocking or filtering action is recommended based on available intelligence.

---

## Ownership and Infrastructure

DNS Resolution:

• PTR Hostname: network.enginet.az
• Forward Resolution: network.enginet.az
• Email Authentication: SPF and DMARC records present

---

## Threat Assessment

Risk Score: 25 / 100 (Low Risk)

Threat Indicators:

• No known attacker signatures
• No spam source activity
• Not a Tor exit node
• No active threat feeds associated
• Zero open ports detected (service classification: Firewalled / No Services)
• DNSBL listed on 1 of 8 total lists

Behavioral Indicators:

• Threat persistence days: 0
• Not persistently malicious
• One historical threat observation recorded
• No honeypot hits detected

---

## Neighborhood Analysis (Subnet: 82.194.23.0/24)

Abuse Density: 0.5 / 1.0 (Minimal)

Classification: mostly_clean

Sibling IP Risk Distribution:

• High Risk: 0
• Medium Risk: 1 (82.194.23.240 - Risk Score: 55)
• Low Risk: 2 (82.194.23.30, 82.194.23.189 - Risk Score: 0)

Active Siblings: 1 of 4 total siblings currently active

---

## Observation History

Total Observations: 18

Recent Activity: 2026-07-24

Key historical signals indicate:

• Subnet classification has remained "mostly_clean" with inherited risk of 5
• No ownership changes recorded
• Threat observation count: 1
• BGP prefix origin: 82.194.23.0/24
• Route stability: Unstable (isRouteStable: false)
• DNSSEC validation: Valid
• RPKI state: Not available

---

## Related Entities

Network Relationships:

• ENGINET-CLIENT-NAT (multiple associations)

DNS Associations:

• network.enginet.az (multiple hostname associations)

Traceroute Profile:

• Hop Count: 30
• Transit Networks: Comcast
• First Hop RTT: 0.2ms
• Last Hop RTT: 175.9ms
• Timed Out Hops: 21

---

## Recommended Actions

Current Risk Level: Low (25/100)

Action Status: No specific firewall rules or blocking recommendations generated at this time. The IP presents minimal threat profile consistent with its classified network role.

Monitoring Recommendations:

• Continue monitoring for service emergence on previously closed ports
• Track any changes in subnet abuse density
• Monitor the medium-risk sibling IP (82.194.23.240) for correlation

---

## Intelligence Notes

This IP address operates under a legitimate network operations infrastructure with proper DNS and email authentication configurations. The low-risk score, absence of threat indicators, and "mostly_clean" subnet classification support continued traffic monitoring without immediate filtering action. The presence of one medium-risk sibling IP warrants periodic review of the broader subnet context.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.