# 94.249.3.191 — IP Intelligence Summary

94.249.3.191 is an IPv4 address operated by GO-JOR (AS8376), geolocated to New York, United States. Its reverse DNS name is 94.249.x.191.go.com.jo. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/94.249.3.191
- Last updated: 2026-10-06

## Ownership

- Organization: GO-JOR
- Network name: ADSL-LNS3
- Allocated block: 94.249.0.0/19
- ASN: AS8376 (https://ipdebrief.com/asn/8376)
- Regional registry: RIPE

## Location

- City: New York
- Region: US-NY
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- 94.249.x.191.go.com.jo
- Forward-confirmed: no

## Analyst narrative

\# IP INTELLIGENCE BRIEFING: 94.249.3.191

**Classification:** LOW RISK

**Date Generated:** 2026-07-26

**Analysis Scope:** Full profile, historical signals, relationship mapping, and neighborhood assessment

\---

\## EXECUTIVE SUMMARY

IP address 94.249.3.191 is classified as **Low Risk (Score: 25)** with no active threat indicators, blacklist listings, or malicious behavior observed. The IP belongs to ADSL-LNS3 network under ASN 8376 (GO-JOR) with geolocation reporting New York, US. No actionable security incidents require immediate attention.

\---

\## NETWORK OWNERSHIP & GEOLOCATION

| Attribute | Value |

|-----------|-------|

| **ASN** | 8376 |

| **Organization** | GO-JOR (ADSL-LNS3) |

| **Network Block** | 94.249.0.0/19 |

| **Geolocation** | New York, US (US-NY) |

| **Timezone** | America/New_York |

| **RIR** | RIPE |

| **Registration** | Not available |

**Note:** DNS PTR records resolve to \`94.249.x.191.go.com.jo\` (Jordan domain), indicating potential geolocation inconsistency between network assignment and DNS configuration.

\---

\## THREAT INDICATORS

\- **Risk Score:** 25 (Low)

\- **Abuse Confidence:** Not applicable

\- **Blacklist Status:** 0 lists

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Malicious Campaigns:** None detected

\- **Threat Persistence:** 0 days

**Assessment:** No threat indicators present across all evaluated threat feeds.

\---

\## NETWORK BEHAVIOR

\- **Open Ports:** None detected

\- **Services:** Firewalled / No Services

\- **Connection Type:** Residential/ADSL

\- **Cloud/CDN/VPN:** Not applicable

\- **Proxy Status:** Not a proxy

\- **Mobile Carrier:** None

\---

\## NEIGHBORHOOD ANALYSIS (94.249.3.0/24)

| Metric | Value |

|--------|-------|

| **Abuse Density** | 0 (Clean) |

| **Total Siblings** | 4 |

| **Active Siblings** | 0 |

| **Threat Siblings** | 0 |

| **Inherited Risk** | 0 |

**Sibling IPs:**

\- 94.249.3.108 (Risk: 0, Authority: 50)

\- 94.249.3.164 (Risk: 0, Authority: 50)

\- 94.249.3.244 (Risk: 0, Authority: 50)

**Assessment:** Entire /24 subnet maintains clean classification with no abuse density or threat activity.

\---

\## RELATIONSHIP MAPPING

\- **Network Associations:** ADSL-LNS3 (6 entries)

\- **DNS Associations:** 94.249.x.191.go.com.jo (5 entries)

\---

\## OBSERVATION HISTORY

\- **Total Observations:** 18

\- **Recent Signals:**

\- 2026-07-26 23:04:01 — Port scan activity (confidence: 0.70)

\- 2026-07-26 23:03:50 — Geolocation: New York, US via Comcast transit

\- 2026-07-26 23:02:23 — Network classification: Not CDN/Cloud/Tor/Proxy

\- 2026-07-26 23:00:30 — Subnet classification: Clean (abuse density: 0)

**Trend:** Stable behavior with no escalation in risk profile. Traceroute shows 30 hops via Comcast transit network.

\---

\## CONTROL PLANE DATA

\- **Origin ASN:** 8376

\- **BGP Prefix:** 94.249.0.0/17

\- **Route Stability:** Not stable

\- **MoAS:** No

\- **RPKI State:** Not evaluated

\- **DNSSEC:** Valid

\- **DNSBL Listed:** 1 of 8 total lists

\---

\## RECOMMENDED ACTIONS

**No specific firewall rules or mitigation actions recommended.** The IP presents low risk with no active threat indicators. Standard monitoring practices apply.

\---

\## INTELLIGENCE SUMMARY

IP 94.249.3.191 is a residential ADSL endpoint with minimal risk characteristics. The IP shows no association with malicious infrastructure, campaigns, or abuse patterns. While DNS records point to a Jordanian domain (.jo), geolocation data consistently reports New York, US, suggesting either:

1. Legitimate dual-region operations

2. DNS misconfiguration

3. Residency in Jordan with US-based transit

**Recommended Action:** Monitor for any changes in geolocation consistency or emergence of threat indicators. No immediate blocking or investigation warranted.

## Nearby addresses

- 94.249.3.60 (https://ipdebrief.com/94.249.3.60)
- 94.249.3.108 (https://ipdebrief.com/94.249.3.108)
- 94.249.3.155 (https://ipdebrief.com/94.249.3.155)
- 94.249.3.164 (https://ipdebrief.com/94.249.3.164)
- 94.249.3.167 (https://ipdebrief.com/94.249.3.167)
- 94.249.3.240 (https://ipdebrief.com/94.249.3.240)
- 94.249.3.244 (https://ipdebrief.com/94.249.3.244)
- 94.249.3.245 (https://ipdebrief.com/94.249.3.245)

---

Source: IPDebrief, "94.249.3.191 IP intelligence", https://ipdebrief.com/94.249.3.191, updated 2026-10-06. Assessments are probabilistic.