141.98.140.34
# INTELLIGENCE BRIEFING: 141.98.140.34/32
Classification: Low Risk / Mobile Carrier Infrastructure
Date: Intelligence compiled from current observations
---
## EXECUTIVE SUMMARY
IP address 141.98.140.34 is a Vodafone Albania Data Network mobile carrier address (ASN 21183) with no malicious indicators. The IP presents as firewalled infrastructure with no open services. While geolocation data shows inconsistencies between the profile (US) and historical observations (Albania), the IP carries no threat indicators and zero abuse density in its /24 neighborhood. No actionable security recommendations are warranted based on current signals.
---
## RISK ASSESSMENT
| Metric | Value | Assessment |
|---|---|---|
| Risk Score | 0 | Low Risk |
| Provider Score | 0 | No provider attribution |
| Authority Score | 0 | No authoritative signals |
| Blacklist Count | 0 | Not listed |
| Abuse Confidence | N/A | No abuse signals |
| Operator Score | 0.1304 | Minimal |
Threat Status: No malicious indicators detected. The IP is not classified as a Tor exit node, known attacker, or spam source.
---
## NETWORK IDENTIFICATION
- ASN: 21183 (Vodafone Albania Data Network)
- Organization: Vodafone Albania Data Network
- CIDR Block: 141.98.140.32/27
- Infrastructure Type: Mobile Carrier
- Connection Type: Mobile
- Network Role: Firewalled / No Services
Geolocation Note: Profile indicates US-NY; historical observations show Albania (Tirana). This inconsistency warrants monitoring but is common for mobile carrier infrastructure with multi-region routing.
---
## OBSERVATION HISTORY
Twelve observations recorded across recent activity. Key findings:
- Classification Consistency: IP consistently classified as mobile carrier infrastructure
- Geolocation Signals: Historical data shows Albania (Tirana) with high confidence (0.70-0.95)
- Organization Signals: Vodafone Albania Data Network consistently attributed with 0.90 confidence
- Threat Signals: No threat-related observations recorded
- Persistence: Zero threat persistence days; not persistently malicious
---
## NEIGHBORHOOD ANALYSIS (141.98.140.0/24)
| Metric | Value |
|---|---|
| Total Siblings | 5 |
| Active Siblings | 0 |
| Threat Siblings | 0 |
| Abuse Density | 0 |
| Subnet Risk Classification | Low |
Neighbor Risk Distribution: 4 low risk, 0 medium, 0 high. Neighboring IPs show sporadic low-risk scores (25) but no malicious activity patterns.
---
## RELATIONSHIP GRAPH
- Primary Link: Vodafone-AL-Fixed-Broadband-12 (Same Network)
- Related Hostnames: None detected
- Associated Certificates: None
- Correlated IPs: None beyond neighborhood scope
---
## SERVICE ENUMERATION
| Parameter | Status |
|---|---|
| Open Ports | None |
| DNS PTR Records | None |
| Hosted Domains | None |
| Email Auth (SPF/DMARC) | Not configured |
| TLS Certificate | None |
| HTTP Title | None |
Assessment: No services exposed. IP is not responding on standard service ports.
---
## CONTROL PLANE DATA
- Origin ASN: 21183
- BGP Prefix: 141.98.140.0/23
- Route Stability: Unstable (routeChanges30d: 0, isRouteStable: false)
- RPKI State: Not validated
- DNSSEC: Valid
- DNSBL Listed: 0/8 lists
- Hop Count: 30 (via Comcast transit)
---
## RECOMMENDED ACTIONS
No immediate actions recommended. The IP presents as benign mobile carrier infrastructure with zero threat indicators.
Monitoring Considerations:
- Track geolocation consistency (US vs Albania signals)
- Monitor for new threat indicators in future observations
- Review if outbound connections from this IP require scrutiny
---
Status: No blocking or filtering recommended. Monitor for signal changes.
*End of Intelligence Briefing*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Vodafone Albania Data Network |
| ASN | AS21183 |
| Network Name | Vodafone-AL-Fixed-Broadband-12 |
| CIDR Block | 141.98.140.32/27 |
| RIR | RIPE |
| Country | AL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS21183 |
| Network Prefix | 141.98.140.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 21% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 13% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-13 21:31:51 UTC |
| Last Seen | 2026-09-02 11:17:39 UTC |
| Profile Built | 2026-09-02 11:24:40 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 141.98.140.34
Who owns the IP address 141.98.140.34?
141.98.140.34 is registered to Vodafone Albania Data Network. The address falls within the 141.98.140.32/27 network block. Registration is held at RIPE.
Where is 141.98.140.34 located?
Geolocation data places 141.98.140.34 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 141.98.140.34 malicious or safe?
141.98.140.34 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 141.98.140.34 a VPN, proxy, or data center address?
141.98.140.34 is classified as a mobile network based on network ownership and behavioural analysis.