89.93.96.231📋 Copy

# IP Intelligence Briefing: 89.93.96.231/32

## Executive Summary

IP address 89.93.96.231 is a low-risk (score: 25) French mobile network endpoint operated by Bouygues Telecom. The address presents minimal threat indicators, with no active services detected, clean neighborhood classification, and no persistent malicious activity observed.

---

## Ownership & Infrastructure

• ASN: 5410 (BOUYGTEL-ISP-CABLE)
• Organization: BOUYGUES TELECOM SA
• Network Block: 89.92.0.0/15 (RIR: RIPE)
• Geolocation: France, Île-de-France region, Saint-Germain-sur-Morin
• Mobile Carrier: Bouygues Telecom (MCC: 208, MNC: 20, LTE/5G technology)
• Infrastructure Type: Mobile/Residential endpoint
• Network Role: Firewalled / No services exposed

---

## Threat Profile

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Threat Feeds: No indicators detected
• Known Campaigns: None correlated

Control Plane Observations:

• BGP Origin ASN: 5410
• AS Path: 34549 → 1299 → 5410
• BGP Prefix: 89.80.0.0/12
• Route Stability: Unstable (1 change in 30 days)
• DNSBL Listings: 1 of 8 total lists

---

## DNS & Network Fingerprinting

• PTR Hostname: 89-93-96-231.hfc.dyn.abo.bbox.fr
• Reverse DNS: Confirmed (forward resolution count: 1)
• Domain: bbox.fr
• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None (firewalled)
• Server Fingerprinting: No HTTP headers, content, or TLS data collected

---

## Neighborhood Analysis (89.93.96.0/24)

• Abuse Density: 0% (clean)
• Active Siblings: 0
• Threat Siblings: 0
• Total Neighbors: 0 detected
• Subnet Classification: Clean

---

## Historical Observations

Total Signals: 22 observations recorded

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: No
• Threat Observation Count: 0

Recent Signal Types Observed:

• Network infrastructure classification (is_cdn, is_tor, is_vpn, is_proxy, is_mobile, etc.)
• ASN allocation data (allocated since 1995-09-08, 11,275 days)
• BGP routing information (prefix changes, AS path validation)

Temporal Trends: No significant changes in threat profile or ownership characteristics observed.

---

## Relationship Graph

• DNS Associations: 89-93-96-231.hfc.dyn.abo.bbox.fr (dynamic residential hostname)
• Network Associations: BOUYGTEL-ISP-CABLE
• Correlated IPs: None detected
• Certificate Matches: 0

---

## Recommended Actions

Based on current risk profile and threat indicators:

• Firewall Rules: No specific blocking rules required (low risk, no malicious activity)
• Monitoring: Standard monitoring recommended; no elevated threat posture
• Investigation Priority: Low

---

## Intelligence Assessment

This IP represents a typical mobile network endpoint in the French Bouygues Telecom infrastructure. The dynamic hostname format (hfc.dyn.abo.bbox.fr) indicates residential/mobile broadband allocation. The absence of open services, combined with a clean neighborhood and no threat indicators, suggests legitimate residential use. The single DNSBL listing requires investigation but does not indicate active malicious behavior. No correlation to known threat campaigns or persistent malicious activity detected.

Classification: Legitimate Mobile Network Endpoint - Low Risk

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.