# IP Intelligence Briefing: 74.220.129.106/32
Classification: Low Risk | Date: 2026-07-29 | Source: IPDebrief Intelligence Platform
---
## Executive Summary
IP address 74.220.129.106 presents a low-risk threat profile with a risk score of 25/100. The endpoint is owned by Ritter Communications (ASN: 23404) within the RITTERNET-BLK-3 block (74.220.128.0/20) in Jacksonville, Arkansas. Analysis indicates no active threat indicators, no open services, and no evidence of malicious campaign association.
---
## Network Ownership & Geolocation
- Organization: Ritter Communications
- ASN: 23404
- CIDR Block: 74.220.128.0/20
- Geolocation: United States, Arkansas, Jacksonville
- RIR: ARIN
- PTR Record: 74-220-129-106.ritternet.com
The IP resolves to Ritter Communications infrastructure with forward DNS resolution showing no reverse confirmation.
---
## Threat Indicators
- Overall Risk Score: 25 (Low Risk)
- Blacklist Status: Listed on 1 of 8 DNSBLs (max severity: high)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Proxy/VPN/CDN: No
- Honeypot Hits: 0
Threat indicators remain empty. No associations with known malicious campaigns or threat feeds.
---
## Network Role & Services
- Service Purpose: Firewalled / No Services
- Open Ports: None detected
- TLS Certificate: No
- HTTP Banner: No
- Network Classification: Not cloud, not hosting, not residential
The endpoint shows no active services and appears to be firewalled with no open ports for external scanning.
---
## Control Plane Analysis
- Origin ASN: 23404
- BGP Prefix: 74.220.128.0/20
- Route Stability: Unstable (isRouteStable: false)
- Route Changes (30d): 0
- MoAS: No
- RPKI State: Not validated
- DNSSEC: Valid
- DNSBL Listings: 1
---
## Historical Observation Summary
Analysis of 16 signal observations reveals consistent ownership and geolocation data over the observation period. Key observations include:
- Geolocation: US, Arkansas (confidence: 0.35)
- Organization: Ritter Communications (confidence: 0.90)
- Network: RITTERNET-BLK-3 (confidence: 0.95)
- Blacklist Status: Listed on 8 total lists with 1 active listing (max severity: high)
No evidence of ownership changes or persistent malicious behavior observed.
---
## Relationship Graph
- Same Network: RITTERNET-BLK-3 (2 entries)
- DNS Associations: 74-220-129-106.ritternet.com (2 entries)
No additional external relationships to subnets, organizations, or certificates beyond DNS associations.
---
## Neighborhood Analysis
Subnet: 74.220.129.106/24
- Neighbor Count: 0
- Abuse Density: 0
- High-Risk Neighbors: 0
- Medium-Risk Neighbors: 0
- Low-Risk Neighbors: 0
- Threat Siblings: 0
The immediate subnet shows no neighboring threat activity.
---
## Recommended Actions
Based on the low-risk profile and absence of active threat indicators:
- No immediate blocking recommended
- Standard monitoring maintained
- No firewall rules required
The endpoint presents minimal threat to network security operations.
---
Analyst Notes: This IP belongs to a legitimate network infrastructure provider. The single DNSBL listing with high severity warrants periodic review but does not indicate active malicious use. No evidence of abuse, scanning, or campaign association detected.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ritter Communications |
| ASN | AS23404 |
| Network Name | RITTERNET-BLK-3 |
| CIDR Block | 74.220.128.0/20 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 74-220-129-106.ritternet.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 74-220-129-106.ritternet.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS23404 |
| Network Prefix | 74.220.128.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 12% | 2 | 2 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 12% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-20 00:17:46 UTC |
| Last Seen | 2026-09-03 18:21:34 UTC |
| Profile Built | 2026-09-03 18:22:35 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 74.220.129.106
Who owns the IP address 74.220.129.106?
74.220.129.106 is registered to Ritter Communications. The address falls within the 74.220.128.0/20 network block. Registration is held at ARIN.
Where is 74.220.129.106 located?
Geolocation data places 74.220.129.106 in Jacksonville, Arkansas, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 74.220.129.106 malicious or safe?
74.220.129.106 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 74.220.129.106?
The reverse DNS (PTR) record for 74.220.129.106 is 74-220-129-106.ritternet.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.