199.91.128.98📋 Copy

# IP Intelligence Briefing: 199.91.128.98/32

## Executive Summary

Intellect analysis of 199.91.128.98 indicates a moderate risk residential network endpoint with no active threat indicators. The IP belongs to Peetz Telephone's 199.91.128.0/23 block in Colorado and shows no evidence of malicious activity despite minor DNSBL presence.

## Threat Profile

Risk Assessment: Moderate (Score: 55/100)

• DNSBL Status: Listed on 3 of 8 DNSBL feeds (dnsblListedCount: 3)
• Threat Indicators: None detected. IP is not a known attacker, spam source, Tor exit node, or proxy
• Abuse Confidence: No abuse confidence score generated; no known campaigns associated
• Malicious Persistence: Threat observation count: 0; not persistently malicious

## Network Infrastructure

## Network Neighborhood Analysis

Subnet: 199.91.128.98/24

• Abuse Density: 0%
• Neighbor Count: 0 siblings detected
• Risk Distribution: No high/medium/low risk neighbors observed
• Classification: No inherited risk from subnet

## Control Plane & Routing

• Route Stability: Not stable (route changes detected)
• BGP Origin: 199.91.128.0/23
• DNSSEC: Valid
• Transit Networks: Comcast, Cogent
• Traceroute: 16 hops; first hop RTT: 0.2ms; last hop RTT: 63.2ms; 1 timed-out hop

## Historical Observations

Total Signals: 12 observations

Recent signal types observed:

• Traceroute analysis (confidence: 85%)
• Ownership verification (confidence: 90%)
• Network classification (confidence: 30%)
• Organization registration (confidence: 95%)

No evidence of escalating threat behavior or ownership changes over observation period.

## Relationship Graph

• Direct Relationships: 4 relationships identified
• Target Type: All relationships map to same network (PEETZ-NET1)
• External Connections: No hostnames, certificates, or organizational relationships detected

## Recommended Actions

Firewall Rules

```

# Block if positive security findings emerge

iptables -A INPUT -s 199.91.128.98 -j DROP

```

Monitoring Recommendations

• Monitor for DNSBL listing changes (currently 3 of 8 lists)
• Track for any service port openings (currently firewalled)
• No immediate action required; standard residential IP monitoring recommended

## Intelligence Assessment

199.91.128.98 represents a residential network endpoint with moderate risk classification primarily due to DNSBL presence. No active threat intelligence correlates detected. The IP lacks service ports, shows no malicious campaign associations, and operates within a low-abuse-density subnet. SOC teams may apply standard monitoring; no immediate blocking recommended unless additional threat indicators emerge.

---

*Report generated: Based on IPDebrief intelligence platform data*

*Classification: Unverified Threat Intelligence*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.