89.254.179.156
## IP Intelligence Briefing: 89.254.179.156
Classification: Low Risk / Investigative Interest
Analysis Date: 2026-07-22
---
Ownership & Registration
The IP address 89.254.179.156 is registered to Konstantin Ceiko under the netname OST-NET. The allocation falls within the RIPE registry's 89.254.168.0/21 block (ASN 41563). Ownership shows no recent changes and the IP is associated with the Latvian domain ostkom.lv.
Geolocation & Infrastructure
Location: Liepāja, Latvia (LV)
Coordinates: 56.51°N, 21.02°E
Infrastructure Type: Firewalled / No Services
Network Classification: Not identified as CDN, hosting, VPN, proxy, Tor exit, or cloud infrastructure.
The IP is geolocated to Liepāja with 1 geo-source and consensus validation. However, geo-plausibility scoring flagged a potential discrepancy (distance: 1031.2 km).
DNS & Email Authentication
PTR Record: host.ostkom.lv
Forward Resolution: host.ostkom.lv (unconfirmed)
Email Authentication: SPF record present; DMARC record present.
DNS configuration indicates legitimate business infrastructure. No reverse DNS validation failure observed.
Threat Indicators & Blacklist Status
Current Risk Score: 25 (Low Risk)
Abuse Confidence: Not elevated
Known Threats: No active threat indicators detected
Blacklist Status: 1 DNSBL listing found across 8 total lists; maximum severity rated as "high"
The IP does not appear in major threat feeds as a known attacker, spam source, or Tor exit node.
Control Plane & BGP Routing
BGP Origin: 89.254.128.0/18 (ASN 41563)
RPKI State: Not validated
IRR Consistency: Not validated
Route Stability: Route changes recorded in the past 30 days
DNSSEC: Valid
The BGP prefix is established but route stability indicators suggest potential routing updates or reassignments.
Neighborhood Analysis
Subnet: 89.254.179.156/24
Neighbor Count: 0
Abuse Density: 0
Risk Distribution: No high, medium, or low-risk neighbors detected
The /24 subnet shows no neighboring IPs with observable activity, indicating isolated infrastructure deployment.
Historical Observation Summary
Observation Count: 16 signals recorded
Most Recent Activity: 2026-07-22
Key historical findings:
- ICMP validation blocked (unable to validate)
- Geolocation data collected with confidence scoring
- DNS associations confirmed for ostkom.lv
- Blacklist activity detected with 8 total listings and 1 high-severity entry
Recommended Actions
Immediate: No urgent blocking required. Risk score remains low.
Monitoring:
- Continue monitoring DNSBL listing status
- Verify route stability and IRR consistency
- Validate geo-location accuracy for Liepāja region
Firewall Rules: Standard allow policies apply. No specific block or allow rules recommended at this time.
---
Summary: The IP address 89.254.179.156 is a legitimate Latvian business infrastructure asset associated with OST-NET (ASN 41563). While currently classified as low risk, the presence of one high-severity DNSBL listing warrants periodic review. No immediate threat indicators or malicious activity patterns observed.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Konstantin Ceiko |
| ASN | AS41563 |
| Network Name | OST-NET |
| CIDR Block | 89.254.168.0/21 |
| RIR | RIPE |
| Country | LV |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | host.ostkom.lv |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | host.ostkom.lv |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 3/3 domains |
| DMARC | 3/3 domains |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 3 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 8443 | https-alt | tcp | — |
| Closed Ports | 22, 25, 80, 443, 3389, 8080 (1 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | router.asus.com |
| Valid From | 2022-04-15T03:29:45+00:00 |
| Valid Until | 2032-04-15T03:29:45+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 3653 days |
🛡️ Public Network Snapshot
| Origin ASN | AS41563 |
| Network Prefix | 89.254.128.0/18 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims US but primary geo says LV
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:22:21 UTC |
| Last Seen | 2026-08-26 19:24:08 UTC |
| Profile Built | 2026-08-29 07:38:41 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 89.254.179.156
Who owns the IP address 89.254.179.156?
89.254.179.156 is registered to Konstantin Ceiko. The address falls within the 89.254.168.0/21 network block. Registration is held at RIPE.
Where is 89.254.179.156 located?
Geolocation data places 89.254.179.156 in Liepāja, Liepaja, Latvia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 89.254.179.156 malicious or safe?
89.254.179.156 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 89.254.179.156?
The reverse DNS (PTR) record for 89.254.179.156 is host.ostkom.lv. This hostname is not forward-confirmed, so it should be treated as a weak signal.
What ports are open on 89.254.179.156?
Responsive ports observed on 89.254.179.156 include 8443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.