94.78.89.29📋 Copy

IP Intelligence Briefing: 94.78.89.29/32

Date: 2026-06-06

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Ownership: Registered to MNT-NETH (Turkish ISP) under ASN 44558.
• Geolocation: Mersin, Turkey (36.81°N, 34.64°E).
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services detected).
• Threat Indicators: No direct malicious indicators (no blacklists, campaigns, or exploits).

---

**2. Network & Subnet Analysis**

• Subnet: 94.78.89.0/24
• Abuse Density: 6.67% (moderate risk).
• Neighbors:

- High-risk neighbors: 1 (94.78.89.46, 94.78.89.54, 94.78.89.56) with risk scores ≥80.

- Active siblings: 3 IPs (total 15 in subnet).

- Threat Siblings: 1 IP flagged in neighborhood.

---

**3. Threat & Behavioral Signals**

• DNS:

- PTR hostname: `94-78-89-29.netonline.net`.

- SPF/DKIM records present (email security configured).

• DNSBL Listings: 4/8 lists (moderate risk).
• BGP:

- Route stability: Unstable (recent changes).

- Operator score: 0.13 (Minimal risk).

---

**4. Historical Trends**

• Risk Stability: Fluctuating signals (last 30 days).
• Key Observations:

- Minimal operator risk (0.13 score).

- Subnet abuse density increased to 26.67% in recent scans.

---

**5. Recommendations**

• Monitor: High-risk neighbors (94.78.89.46, 94.78.89.54, 94.78.89.56) for lateral movement.
• Block: Consider blocking this IP if it’s not a trusted internal asset.
• Investigate: DNSBL listings and subnet abuse density may indicate compromised infrastructure.

Next Steps: Cross-reference with internal assets and monitor for anomalous traffic patterns.

---

*Data sourced from IPDebrief threat intelligence platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.