89.70.166.43
IP Intelligence Briefing: 89.70.166.43
Date: 2026-06-08
---
**1. Core Profile**
- Risk Rating: Moderate Risk (Score: 55)
- Ownership:
- ASN: AS9141 (P4-UPCPL-MNT / PLAY)
- Country: Poland (PL)
- Region: Pomerania, City: Warsaw
- Network Role: Firewalled / No Services (no open ports or TLS certificates detected).
- Threat Indicators: No active threats, malware, or known attacker campaigns.
---
**2. Geolocation & Network**
- Physical Location:
- Coordinates: 50.2768°N, 19.0146°E (Warsaw, Poland).
- Timezone: Europe/Warsaw.
- Subnet: 89.70.166.43/24 (no active neighbors detected).
- ISP/Provider: Liberty Global B.V. (AS6830) via PLAY.
---
**3. DNS & Hosting**
- PTR Record: `89-70-166-43.dynamic.play.pl` (play.pl domain).
- Email Security: SPF and DMARC records present (no email abuse indicators).
- Hosting: No hosted domains or email services detected.
---
**4. Threat Observations (Last 30 Days)**
- DNSBL Listings:
- Listed in 2 out of 8 DNSBLs (severity: low).
- No high-severity threats or malicious campaigns detected.
- Traceroute:
- 15 hops, with transit through Comcast.
- Avg RTT: 149.6ms (geolocation plausible).
- BGP:
- Route prefix: `89.68.0.0/14` (AS9141).
- Route stability: Unstable (no long-term consistency).
---
**5. Relationships & Context**
- DNS Associations:
- Linked to `89-70-166-43.dynamic.play.pl` (multiple entries).
- Network Affiliation:
- Same subnet as PLAY (ASN9141).
- No known connections to other malicious networks.
---
**6. Recommendations**
- Monitor DNSBL Status: Investigate why the IP is listed in 2 DNSBLs (e.g., spam, phishing).
- Verify Ownership: Discrepancy between ASN9141 (PLAY) and AS6830 (Liberty Global) may indicate misconfigured routing or data errors.
- Network Segmentation: Since the IP is firewalled, ensure it is isolated from internal systems unless explicitly needed.
- Geolocation Validation: Confirm legitimacy of Warsaw, Poland, given mixed ISP data.
---
Conclusion:
This IP appears to be a legitimate, firewalled host under PLAY’s ownership, with no direct malicious activity. However, its DNSBL listings and conflicting ISP data warrant closer monitoring. SOC teams should validate ownership and ensure no unintended exposure to internal networks.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | P4-UPCPL-MNT |
| ASN | AS9141 |
| Network Name | PLAY |
| CIDR Block | 89.67.0.0/16 |
| RIR | RIPE |
| Country | PL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 89-70-166-43.dynamic.play.pl |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 89-70-166-43.dynamic.play.pl |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 30% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 17% | 1 | 1 |
| Overall | 14% | 6 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-19 03:37:04 UTC |
| Last Seen | 2026-06-26 18:11:41 UTC |
| Profile Built | 2026-06-08 18:30:29 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.