89.251.0.4📋 Copy

IP Intelligence Briefing: 89.251.0.4

Date: 2026-06-07

---

**1. Risk Profile**

• Risk Score: 25 (Low Risk)
• Threat Indicators: None detected (no malware, phishing, or malicious activity).
• Network Stability: Stable (no recent route changes).
• Ownership: Registered to VPN Consumer Toronto, Canada (ASN 41564).
• Geolocation: Toronto, Canada (43.71°N, -79.41°W).

---

**2. Network & Subnet Analysis**

• Subnet: 89.251.0.0/24
• Abuse Density: 18.6% (classified as "mostly_clean").
• Neighboring IPs:

- 43 total siblings in the subnet.

- 8 risky neighbors (25% risk score).

- Active IPs: 0 (no traffic observed).

• Provider: Orion Network Limited (NL), RIPE registry.

---

**3. Threat & Behavioral Insights**

• Threat History: No observed malicious activity in the last 30 days.
• Services: No open ports or active TLS/HTTP services detected.
• DNS: No PTR records or domain associations.
• DNSSEC: Validated.
• BGP: Stable route with no recent changes.

---

**4. Relationships & Context**

• Linked Network: TORONTO-CA-89-251-0-0 (same subnet).
• Organization: "VPN Consumer Toronto, Canada" (abuse contact available via RDAP).
• Subnet Classification: Mostly clean, but with 8 risky neighbors.

---

**5. Recommendations**

• Monitor Subnet: The 89.251.0.0/24 subnet has 18.6% abuse density; investigate risky neighbors (e.g., 89.251.0.18, 89.251.0.32).
• Verify Ownership: Confirm the VPN provider’s legitimacy and check for spoofing risks.
• No Immediate Action: No actionable firewall rules or security measures required for this IP.

---

Summary:

The IP 89.251.0.4 is low-risk and part of a Canadian VPN network. While no direct threats are detected, the subnet’s abuse density suggests monitoring neighboring IPs for potential risks. No immediate defensive action is required, but ongoing surveillance is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.