91.105.32.220📋 Copy

# IP Intelligence Briefing: 91.105.32.220/32

Classification: Low Risk / No Active Threat Indicators

Date: July 27, 2026

Analyst: IPDebrief SOC Team

---

## Executive Summary

IP 91.105.32.220 is classified as Low Risk with a risk score of 0. The address belongs to ASN 12578 (LTC Hostmaster / TET-HOME) and shows no active threat indicators, blacklist listings, or malicious campaign associations. No security action recommendations are generated at this time.

---

## Ownership and Network Infrastructure

Control Plane: BGP prefix 91.105.0.0/17 with 0 route changes observed in 30 days. DNSSEC validation is enabled. Operator score rated as "Minimal" (0.1304).

---

## Geolocation Analysis

Primary Location: Frankfurt, Germany (DE)

• Confidence: Multiple geo sources with consensus validation
• Accuracy: High (geoPlausible: true)

Notable Observation: Historical signals detected from Latvia (Riga), indicating potential geo-inconsistency or multi-region routing. Minimum RTT measured at 140ms from Frankfurt.

Traceroute: 13 hops with 1 timeout. Transit through Comcast networks observed.

---

## Threat Profile

Current Status: Clean

• Risk Score: 0
• Abuse Confidence Score: None
• Blacklist Count: 0
• Threat Feeds: None populated

Malicious Activity Indicators:

• Not a known attacker
• Not a spam source
• Not a Tor exit node
• Not a proxy or VPN
• Not hosting infrastructure
• No WAF violations detected

Campaign Correlation: No matching certificates, no correlated IPs, no known campaign associations.

---

## Network Role and Services

Classification: Firewalled / No Services

• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None
• DNS Resolution: No PTR records, no forward resolution
• Email Reputation: Not configured (no SPF/DMARC records)

Behavioral Analysis:

• Zero honeypot hits
• Zero enumeration strikes
• Zero total incidents
• No persistently malicious behavior observed

---

## Neighborhood Analysis (91.105.32.0/24)

No neighboring IPs with elevated risk scores detected in the /24 subnet.

---

## Observation History (16 Signals)

Recent activity concentrated on July 27, 2026:

• Ownership signals (RIPE, LTC Hostmaster): Confidence 90-95%
• Geolocation signals (Latvia/Germany): Confidence 75%
• Network role signals: Confidence 30-60%

Temporal analysis shows no ownership changes and zero threat persistence days.

---

## Intelligence Narrative

IP 91.105.32.220 represents a standard residential/business broadband allocation under LTC Hostmaster's TET-HOME network. The address shows no evidence of compromise or malicious activity. While geolocation signals indicate routing through both Germany and Latvia, the IP itself maintains a clean threat profile with no blacklist associations.

The subnet (91.105.32.0/24) demonstrates minimal abuse density, suggesting this is not a targeted or compromised network segment. The IP's classification as "Firewalled / No Services" indicates it is likely an end-user address with no publicly accessible services.

Recommended Action: Standard monitoring only. No firewall rules or blocking recommended at this time.

---

## SOC Analyst Notes

• No immediate threat action required
• Monitor for changes in geolocation consistency
• Subnet-level abuse density remains at baseline
• Historical signals show stable, benign behavior

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.