89.181.186.157
IP INTELLIGENCE BRIEFING
Target: 89.181.186.157/32
Classification: LOW RISK – Defensible
Date: Current Analysis Cycle
Geolocation: Porto, Portugal (PT) – Region 13
---
EXECUTIVE SUMMARY
IP address 89.181.186.157 is a low-risk infrastructure endpoint owned by NOS Comunicacoes S.A. (ASN 2860), a major Portuguese telecommunications provider. The address shows no active threat indicators, no open services, and operates within a clean network segment. Risk assessment yields a score of 25/100, supporting continued monitoring without immediate blocking.
---
OWNERSHIP & NETWORK CONTEXT
| Attribute | Value |
|---|---|
| Organization | IP-MNT / NOS Comunicacoes S.A. |
| ASN | 2860 |
| RIR | RIPE |
| CIDR Block | 89.181.128.0/17 |
| Abuse Contact | abuse@nos.pt |
| Geolocation | Porto, PT (39.4°N, 8.22°W) |
The IP resolves to hostnames within the novis.pt domain ecosystem (89-181-186-157.net.novis.pt), indicating potential use for internal network infrastructure or residential broadband gateway services.
---
THREAT ASSESSMENT
Current Risk Profile:
- Overall Risk Score: 25 (Low)
- Abuse Confidence Score: Not applicable
- Blacklist Status: Clean (0 listings)
- Threat Indicators: None detected
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Network Classification:
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- Infrastructure Type: Standard ISP endpoint
- Cloud/CDN/VPN/Proxy: Not identified
- Mobile Carrier: No
---
OBSERVATION HISTORY (18 Total Signals)
Recent observation activity (as of 2026-07-23) shows consistent geographic attribution to Portugal with moderate confidence (0.52–0.85). Multiple threat intelligence feeds confirm ASN AS2860 ownership without persistent malicious behavior. Historical data indicates:
- Ownership stability (0 changes observed)
- No threat persistence detected
- Zero persistent malicious activity flags
- Average ownership duration: Not applicable
---
RELATIONSHIP GRAPH
| Type | Target | Count |
|---|---|---|
| DNS Association | 89-181-186-157.net.novis.pt | 3 |
| Same Network | NOS | 3 |
Relationships indicate standard ISP routing infrastructure with no anomalous associations to external threat actors, compromised hosts, or malicious campaigns.
---
NEIGHBORHOOD ANALYSIS (Subnet: 89.181.186.157/24)
| Metric | Value |
|---|---|
| Active Siblings | 0 |
| Threat Siblings | 0 |
| Abuse Density | 0 |
| Classification | Clean |
| Risk Distribution | High: 0, Medium: 0, Low: 0 |
The /24 subnet exhibits zero abuse activity, supporting the assessment that this IP is not part of a compromised or high-risk network segment.
---
RECOMMENDED ACTIONS
No immediate security actions recommended. The IP demonstrates:
- Standard ISP endpoint behavior
- No open services or exposed ports
- Clean threat posture
- Stable ownership and geographic attribution
SOC Analyst Guidance: Monitor passively as part of routine traffic analysis. No firewall blocking or WAF rules required based on current risk profile.
---
CONCLUSION
IP 89.181.186.157 is a benign NOS infrastructure endpoint in Portugal with no evidence of malicious activity. The address should be treated as low-risk and monitored alongside normal ISP traffic patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IP-MNT |
| ASN | AS2860 |
| Network Name | NOS |
| CIDR Block | 89.181.128.0/17 |
| RIR | RIPE |
| Country | PT |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 89-181-186-157.net.novis.pt |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 89-181-186-157.net.novis.pt |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS2860 |
| Network Prefix | 89.181.128.0/18 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 22% | 6 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 05:09:25 UTC |
| Last Seen | 2026-08-22 13:16:37 UTC |
| Profile Built | 2026-08-29 10:47:29 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 89.181.186.157
Who owns the IP address 89.181.186.157?
89.181.186.157 is registered to IP-MNT. The address falls within the 89.181.128.0/17 network block. Registration is held at RIPE.
Where is 89.181.186.157 located?
Geolocation data places 89.181.186.157 in Santo Tirso, Porto, Portugal. The local time zone is Europe/Lisbon. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 89.181.186.157 malicious or safe?
89.181.186.157 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 89.181.186.157?
The reverse DNS (PTR) record for 89.181.186.157 is 89-181-186-157.net.novis.pt. This hostname is forward-confirmed, meaning it resolves back to the same address.