194.99.85.105📋 Copy

# INTELLIGENCE BRIEFING: 194.99.85.105/32

Classification: LOW RISK | Date: Current | Risk Score: 25/100

---

## EXECUTIVE SUMMARY

IP 194.99.85.105 is classified as low-risk with no active threat indicators. The address operates within a clean residential/ISP subnet in Frankfurt, Germany, with no evidence of malicious activity, blacklisting, or abuse patterns. No defensive actions are currently recommended.

---

## OWNERSHIP & GEOLOCATION

• Organization: Christian Kuhlmann
• ASN: AS62336 (purtel.com gmbh)
• Network: 194.99.85.0/24
• Country: Germany (DE)
• City: Frankfurt
• RIR: RIPE
• Registration: No public registration date available

---

## THREAT PROFILE

Current Risk Status: Low Risk (Score: 25/100)

DNSBL Status: Listed on 1 of 8 threat feeds (DNSBL Listed Count: 1)

---

## NETWORK SERVICES

• Open Ports: None detected
• Service Purpose: Firewalled / No Services
• Infrastructure Type: Non-provider, residential/ISP endpoint
• Certificate Data: None
• HTTP Banner: None

---

## DNS ANALYSIS

• PTR Record: 194-99-85-105.access.fra.german-local.net
• Forward Resolution: 194-99-85-105.access.fra.german-local.net
• Reverse DNS Validated: No (forwardConfirmed: false)
• Email Authentication: SPF configured; DMARC not configured

---

## NEIGHBORHOOD ANALYSIS (194.99.85.0/24)

• Total Sibling IPs: 14
• Abuse Density: 0%
• Subnet Classification: Clean
• Risk Distribution:

- High Risk: 0

- Medium Risk: 0

- Low Risk: 14 (100%)

Notable Neighbors:

• 194.99.85.71, .72, .75, .80, .92, .93, .100 (Risk Score: 25)
• 194.99.85.13, .21, .32, .134, .240, .254 (Risk Score: 0)

---

## OBSERVATION HISTORY (19 Total Signals)

Recent observations indicate stable, low-risk behavior:

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: No

---

## RELATIONSHIP GRAPH (26 Relationships)

• Network Associations: DE-CUNET-20191122, PURTEL-NET
• DNS Associations: 194-99-85-105.access.fra.german-local.net (multiple records)
• Campaign Correlations: None
• Cert Matches: 0
• Correlated IPs: 0

---

## CONTROL PLANE DATA

• Route Stability: False
• Route Changes (30d): 0
• RPKI State: Not available
• IRR Consistency: Not available
• DNSSEC Valid: Yes
• Operator Score: 0.1304 (Minimal)

---

## RECOMMENDED ACTIONS

Status: No recommendations generated

The IP address shows no active threat indicators and operates within a clean subnet. No firewall rules or blocking actions are currently warranted.

---

## ANALYST NOTES

This IP represents standard residential or ISP infrastructure with no malicious activity detected. The subnet shows consistent low-risk behavior across all neighbor addresses. The single DNSBL listing does not indicate elevated threat activity. SOC teams may treat this as benign traffic requiring no special handling.

Confidence Level: High | Data Sufficiency: Adequate

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.