94.156.232.116📋 Copy

IP Intelligence Briefing: 94.156.232.116

*Generated via IPDebrief Analysis*

---

**1. Risk Profile**

• Risk Score: 25 (Low Risk)
• Provider/Authority Scores: 0/0
• Stability: Minimal risk (operational stability score 0.13).
• Threat Indicators: No malware, phishing, or spam associations. Not listed in DNSBLs or blacklists.

---

**2. Ownership & Geolocation**

• Registrar: H2NEXUS LTD (AS215730, RIPE)
• Geolocation:

- Country: Germany (DE)

- City: Sofia (Bulgaria)

- Coordinates: 51.17°N, 10.45°E

- Accuracy: 400km radius (potential inconsistency noted).

• ISP: Unassigned (firewalled infrastructure).

---

**3. Network Behavior**

• Services: No open ports, no TLS certs, no HTTP banners.
• DNS:

- PTR hostname: `s288346.love-is.nexus`

- No SPF/DMArc records; DNSSEC valid.

• Subnet: 94.156.232.0/24 (clean, 0% abuse density).
• BGP: Stable route with no recent changes.

---

**4. Observation History**

• Consistency: Minimal fluctuations (risk score 25 for 30 days).
• Activity: No persistent malicious behavior or campaign associations.

---

**5. Relationships**

• Network: Linked to H2NEXUS LTD (same ASN).
• DNS: Associated with `s288346.love-is.nexus` (no email auth).
• No C2 domains, hosting, or CDN infrastructure detected.

---

**6. Neighborhood Analysis**

• Subnet: 94.156.232.0/24
• Neighbors: 1 active IP (itself), 0 threat siblings.
• Abuse Density: 0% (clean subnet).

---

**7. Recommended Actions**

• Monitoring: No immediate mitigation required.
• Investigation: Verify geolocation discrepancy (Sofia, Bulgaria vs. Germany registration).
• Logs: Monitor for unexpected DNS or network changes.

Conclusion: 94.156.232.116 is a low-risk, firewalled IP with no malicious indicators. While geolocation data is inconsistent, no active threats are detected. No firewall rules or actions recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.