194.99.110.119📋 Copy

IP Intelligence Briefing: 194.99.110.119

*Last Updated: 2026-06-17*

---

**1. Profile Summary**

• Risk Score: 25 (Low Risk)
• Ownership: Registered to Christian Kuhlmann (RIPE) with ASN 62336.
• Geolocation: Cologne, North Rhine-Westphalia, Germany (51.03°N, 8.85°E).
• Network Role: Firewalled / No Services (no open ports or TLS certificates detected).
• Threat Indicators: No known malicious activity, spam, or blacklist entries.
• DNS: Resolves to `194-99-110-119.cgn.fra.german-local.net` with SPF validation but no DMARC.

---

**2. Observation History**

• Recent Activity (2026-06-17): Minimal risk detected (operator score 0.13).
• Subnet Abuse Density: 0.33 (mixed risk in 194.99.110.0/24).
• Threat Persistence: No persistent malicious activity observed.

---

**3. Relationships & Associations**

• Network: Linked to DE-CUNET-20191122 (same network).
• DNS: Associated with `german-local.net` (no malicious domains).
• Neighbors: 16 IPs in 194.99.110.0/24, with 12 low-risk and 4 medium-risk siblings.

---

**4. Neighborhood Analysis**

• Subnet Risk: Moderate abuse density (0.33).
• Neighbor Risk Scores: Most IPs scored 25 (low), but 4 have higher risk.
• Recommendation: Monitor high-risk neighbors for lateral movement or shared infrastructure threats.

---

**5. Actionable Intelligence**

• SOC Prioritization: Low risk, but subnet has mixed abuse.
• Security Measures:

- Block high-risk neighbors in the 194.99.110.0/24 subnet if traffic is observed.

- Verify DNS configurations for SPF/DMARC alignment.

- Monitor for unexpected network changes in the subnet.

Note: No immediate threat detected, but ongoing monitoring is advised due to subnet activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.