# 194.104.11.109 — IP Intelligence Summary

194.104.11.109 is an IPv4 address operated by TrafficTransitSolution LLC (AS26548), geolocated to Russia. As of October 15, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/194.104.11.109
- Last updated: 2026-10-15

## Ownership

- Organization: TrafficTransitSolution LLC
- Network name: Net-traffictransitsolution-40
- Allocated block: 194.104.11.0/24
- ASN: AS26548 (https://ipdebrief.com/asn/26548)
- Regional registry: RIPE

## Location

- City: —
- Region: —
- Country: Russia
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP INTELLIGENCE BRIEFING: 194.104.11.109/32

\### Executive Summary

IP address 194.104.11.109 is classified as Low Risk with a risk score of 0. The address belongs to TrafficTransitSolution LLC (AS26548) within the 194.104.11.0/24 subnet registered under RIPE NCC. Current operational status indicates no active services with the host described as "Firewalled / No Services." No known threat indicators, blacklist entries, or active campaigns are associated with this IP.

\### Ownership and Registration

\- **Organization:** TrafficTransitSolution LLC

\- **Netname:** Net-traffictransitsolution-40

\- **CIDR Block:** 194.104.11.0/24

\- **ASN:** 26548

\- **RIR:** RIPE (Registration confirmed)

\- **Abuse Contact:** Available via RDAP

\### Geolocation Data

Geolocation data shows inconsistencies across data sources. Primary consensus indicates Russia (RU), with one historical observation reporting Netherlands (NL). The 5,000km accuracy radius suggests limited geolocation precision. No definitive city or region data available.

\### Network Classification

\- **Infrastructure Type:** Firewalled / No Services

\- **Open Ports:** None detected

\- **DNS Records:** No PTR records; forward resolution not confirmed

\- **Email Authentication:** No SPF or DMARC records detected

\- **Service Detection:** No active TLS certificates or HTTP services observed

\### Threat Assessment

\- **Risk Score:** 0

\- **Abuse Confidence Score:** Not applicable

\- **Blacklist Count:** 0

\- **Threat Feeds:** No associations

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Campaign Associations:** None identified

\### Historical Observations (15 total signals)

Recent observations from 2026-07-28 indicate:

\- Subnet abuse density: 0.2857 (one observation)

\- Classification: Mixed

\- Inherited risk score: 4

\- Ownership changes: 0

\- Threat persistence days: 0

\- Persistent malicious activity: No

Geolocation signals show conflicting data between Russian and Dutch sources, suggesting either legitimate multi-region operations or data inconsistency in upstream sources.

\### Network Neighborhood Analysis (194.104.11.0/24)

\- **Total Neighbors:** 6

\- **Abuse Density:** 0

\- **Risk Distribution:** 0 High, 0 Medium, 6 Low

Sibling IP addresses and risk profiles:

| IP Address | Risk Score | Authority Score |

|------------|-----------|-----------------|

| 194.104.11.95 | 25 | 50 |

| 194.104.11.117 | 25 | 50 |

| 194.104.11.201 | 25 | 50 |

| 194.104.11.214 | 25 | 50 |

| 194.104.11.220 | 25 | 50 |

| 194.104.11.231 | 0 | 50 |

The subnet demonstrates low-to-moderate risk profiles across sibling addresses with no high-risk indicators.

\### Relationship Graph

Single relationship identified: Same network association (Net-traffictransitsolution-40). No additional organizational, hostname, or certificate relationships detected.

\### Recommended Actions

No security actions or firewall rules are recommended at this time. The IP presents minimal threat characteristics with no active services, no threat indicators, and no blacklist associations. Standard baseline monitoring is appropriate.

\### Intelligence Assessment

IP 194.104.11.109 represents a low-risk infrastructure address with no immediate threat indicators. The organization operates within a subnet showing generally low-risk sibling addresses. Geolocation inconsistencies warrant awareness but do not constitute actionable threat intelligence. No escalation or blocking measures recommended.

## Nearby addresses

- 194.104.11.95 (https://ipdebrief.com/194.104.11.95)
- 194.104.11.116 (https://ipdebrief.com/194.104.11.116)
- 194.104.11.117 (https://ipdebrief.com/194.104.11.117)
- 194.104.11.125 (https://ipdebrief.com/194.104.11.125)
- 194.104.11.167 (https://ipdebrief.com/194.104.11.167)
- 194.104.11.201 (https://ipdebrief.com/194.104.11.201)
- 194.104.11.214 (https://ipdebrief.com/194.104.11.214)
- 194.104.11.220 (https://ipdebrief.com/194.104.11.220)
- 194.104.11.231 (https://ipdebrief.com/194.104.11.231)

---

Source: IPDebrief, "194.104.11.109 IP intelligence", https://ipdebrief.com/194.104.11.109, updated 2026-10-15. Assessments are probabilistic.