89.19.34.164📋 Copy

# IP INTELLIGENCE BRIEFING: 89.19.34.164

## Executive Summary

IP address 89.19.34.164 is classified as LOW RISK with a risk score of 25/100. The address is owned by ALAXONA (ASN 26548) and is geolocated to the United States. The IP exhibits no active threat indicators, no open services, and is currently firewalled with no accessible services.

## Technical Profile

• IP Address: 89.19.34.164/32
• Risk Score: 25 (Low Risk)
• ASN: 26548 (ALAXONA)
• Geolocation: United States (US)
• Network Role: Firewalled / No Services
• DNS Resolution: None detected
• Open Ports: None
• TLS/SSL: No certificates detected

## Threat Assessment

The IP shows no active threat indicators:

• Blacklist Status: 0/8 blacklist listings detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None correlated

Historical Observations: 17 total signal observations recorded. One observation flagged high-severity listing activity with 8 total blacklist checks. Geolocation signals consistently place the address in the United States with coordinates approximately 39.83, -98.58.

## Network Context & Relationships

• Subnet: 89.19.34.0/24
• Subnet Abuse Density: 0 (Clean classification)
• Sibling IPs: 3 total neighbors identified

- 89.19.34.32 (Risk: 40)

- 89.19.34.74 (Risk: 25)

- 89.19.34.78 (Risk: 0)

Relationships: 10 detected relationships, all classified as "Same Network" with target "FINEGROUPSERVERS-LEASE", indicating infrastructure hosting association.

## Control Plane Analysis

• Route Stability: Unstable (false)
• Route Changes (30d): 0
• Operator Score: 0.1304 (Minimal)
• DNSSEC: Valid
• ISP Delegation Age: Unavailable

## Operational Observations

• Services: No services detected; port scanning returned no open ports
• HTTP/Fingerprinting: No HTTP title, banner, or server fingerprints detected
• Email Reputation: No email authentication records (SPF, DMARC)
• ICMP Validation: Blocked (unable to validate geolocation via ICMP)

## Recommendations

Given the low risk profile and lack of active threat indicators:

1. No immediate blocking required - IP classified as low risk

2. Monitor sibling IP 89.19.34.32 - Higher risk score (40) within same subnet

3. Standard logging - No special firewall rules recommended

4. Routine monitoring - Continue standard threat intelligence monitoring

---

*Generated via IPDebrief Intelligence Platform - Defensive Security Analysis*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.