# IP Intelligence Briefing: 141.98.140.122/32
Date: 2026-07-24
Analyst: IPDebrief Intelligence Team
Classification: Low Risk / Clean
## Executive Summary
IP 141.98.140.122 is a low-risk address associated with Vodafone Albania's fixed broadband infrastructure. The IP demonstrates no malicious indicators, zero blacklist entries, and exhibits stable operational characteristics typical of residential mobile carrier endpoints. No immediate defensive action required.
## Ownership and Registration
- Organization: Vodafone Albania Data Network
- ASN: 21183
- Network: Vodafone-AL-Fixed-Broadband-14
- CIDR Block: 141.98.140.96/27
- RIR: RIPE
- Abuse Contact: abuseal@vodafone.com
- Registration Date: Not available
## Geolocation
- Country: Albania (AL)
- City: Tirana
- Coordinates: 41.33°N, 19.82°E
- Timezone: UTC+2 (local time)
## Network Classification
- Infrastructure Type: Mobile Carrier
- Connection Type: Mobile
- Classification: Clean
- Abuse Density: 0.0 (no abuse signals in /24 neighborhood)
- Risk Score: 0/100 (Low Risk)
- Provider Score: 0/100
- Authority Score: 0/100
## Service and Port Analysis
- Open Ports: None detected
- DNS Records: No PTR hostnames, no forward resolution
- Email Authentication: No SPF/DMARC records configured
- HTTPS: No TLS certificates detected
- Service Status: Firewalled / No Services
## Threat Intelligence Indicators
- Abuse Confidence Score: Not applicable
- Blacklist Count: 0
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Threat Persistence Days: 0
- Is Persistently Malicious: No
## Behavioral Observations
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
- DNSBL Listed: 0/8 lists
## Historical Activity
Analysis of 12 signal observations (most recent: 2026-07-24) indicates:
- Consistent "clean" classification across all observations
- No ownership changes detected
- No threat persistence patterns observed
- Stable infrastructure characteristics maintained
## Network Neighborhood Assessment
Subnet: 141.98.140.122/24
Total Siblings: 5
Active Siblings: 1
Threat Siblings: 0
Abuse Density: 0.0
Neighbor Risk Profile:
| IP Address | Risk Score | Authority Score | Status |
|---|---|---|---|
| 141.98.140.18 | N/A | N/A | Unresolved |
| 141.98.140.19 | 0 | 50 | Low Risk |
| 141.98.140.34 | 0 | 50 | Low Risk |
| 141.98.140.178 | 25 | 50 | Low-Moderate Risk |
One neighbor (141.98.140.178) exhibits a risk score of 25, warranting periodic monitoring, but does not elevate the target IP's classification.
## Relationship Graph
Three relationships identified, all classified as "Same Network" (Vodafone-AL-Fixed-Broadband-14). No external associations to hostnames, certificates, or organizations detected.
## Recommended Actions
- No immediate action required.
- Monitoring Recommendation: Continue passive monitoring. The IP maintains benign characteristics consistent with legitimate mobile carrier infrastructure.
- Firewall Rules: Standard allow rules may be applied if business requirements exist. No blocking recommended.
## Intelligence Narrative
IP 141.98.140.122 represents standard mobile carrier residential infrastructure from Vodafone Albania's fixed broadband network. The address exhibits no anomalous behavior, maintains zero threat indicators across all threat feeds, and operates within a clean /24 neighborhood. Historical observations confirm stable, non-malicious operation with no escalation in risk profile over the observation window. The IP is appropriately classified as low-risk and requires no defensive intervention.
---
*Intel Summary generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Vodafone Albania Data Network |
| ASN | AS21183 |
| Network Name | Vodafone-AL-Fixed-Broadband-14 |
| CIDR Block | 141.98.140.96/27 |
| RIR | RIPE |
| Country | AL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS21183 |
| Network Prefix | 141.98.140.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-07 18:42:47 UTC |
| Last Seen | 2026-08-26 22:20:43 UTC |
| Profile Built | 2026-08-29 07:18:16 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 18 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 141.98.140.122
Who owns the IP address 141.98.140.122?
141.98.140.122 is registered to Vodafone Albania Data Network. The address falls within the 141.98.140.96/27 network block. Registration is held at RIPE.
Where is 141.98.140.122 located?
Geolocation data places 141.98.140.122 in Tirana, Tirana, AL. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 141.98.140.122 malicious or safe?
141.98.140.122 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 141.98.140.122 a VPN, proxy, or data center address?
141.98.140.122 is classified as a mobile network based on network ownership and behavioural analysis.