109.228.48.105
The IP address 109.228.48.105 was assigned a Moderate Risk reputation score of 50. Ownership records indicated the address was allocated to AS8560-MNT (gb-glo-con-ngcs-public) under the ARIN RIR, with geolocation data placing the host in the United Kingdom. Network role analysis classified the address as a Single-Service Host.
Service enumeration revealed a single open port 22/tcp (SSH) with a banner indicating OpenSSH_9.6p1 Ubuntu-3ubuntu13.18. No HTTP or TLS services were detected. DNS analysis showed no PTR hostnames or forward resolution.
Threat intelligence indicators returned no known attack campaigns, blacklist entries, or reputation sources. Despite the moderate risk score, the address was not flagged as a known attacker, spam source, or Tor exit node.
Operational recommendations were generated to monitor SSH traffic for unauthorized access attempts consistent with the observed risk profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | AS8560-MNT |
| ASN | AS8560 |
| Network Name | gb-glo-con-ngcs-public |
| CIDR Block | 109.228.48.0/23 |
| RIR | ARIN |
| Country | GB |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 4 |
| routing | 27% | 2 | 3 |
| services | 19% | 2 | 2 |
| ownership | 30% | 3 | 4 |
| reputation | 41% | 1 | 17 |
| geolocation | 19% | 2 | 2 |
| Overall | 28% | 12 | 32 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-06 12:47:11 UTC |
| Last Seen | 2026-09-27 14:42:20 UTC |
| Profile Built | 2026-09-22 15:13:41 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 47 |
Full dossier details are available via our API.