91.126.107.222📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 91.126.107.222/32

Date: Current Assessment

Classification: LOW RISK / CLEAN

---

## EXECUTIVE SUMMARY

IP address 91.126.107.222 is assessed as LOW RISK with a comprehensive risk score of 0. The endpoint is a web server hosted on Adamo Telecom Iberia S.A.U infrastructure in Cantabria, Spain. No active threat indicators, blacklist entries, or abuse patterns have been detected. The IP is classified under network role "Tor Exit Nodes" but shows no operational Tor exit behavior. Neighborhood analysis confirms clean subnet status with zero abuse density.

---

## OWNERSHIP AND INFRASTRUCTURE

Organization: Adamo Telecom Iberia S.A.U

ASN: 35699 (ADAMO-IBERIA)

CIDR Block: 91.126.104.0/21

Geolocation: Cantabria, Piélagos, Spain (ES)

Registration: RIR Ripe

DNS Hostname: cli-5b7e6bde.wholesale.adamo.es

Network Services:

• Port 80/TCP: HTTP (openresty)
• Port 443/TCP: HTTPS
• Server Banner: openresty

Email Authentication: SPF and DMARC records configured on associated domain (adamo.es)

---

## THREAT INTELLIGENCE

Risk Assessment:

• Overall Risk Score: 0
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Abuse Confidence Score: N/A
• Blacklist Count: 0

Threat Indicators:

• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• Known Campaigns: None
• Threat Feeds: None

Control Plane:

• BGP Origin: 91.126.104.0/21
• AS Path: Stable
• RPKI State: Valid
• DNSSEC: Valid
• Route Changes (30d): 0

---

## OBSERVATION HISTORY

Total Observations: 24 signals recorded

Threat Observation Count: 0

Threat Persistence Days: 0

Persistent Malicious Activity: False

Recent Signal Types:

• Ownership stability: No changes detected
• Geolocation: Consistent Spain-based resolution
• Banner analysis: Clean HTTP/HTTPS responses
• Campaign correlation: None observed

The IP demonstrates stable ownership and consistent geolocation signals with no degradation in reputation over the observation period.

---

## NEIGHBORHOOD ANALYSIS

Subnet: 91.126.107.0/24

Total Siblings: 1 active

Threat Siblings: 0

Abuse Density: 0 (Clean)

Classification: Clean

No sibling IPs within the /24 subnet exhibit malicious behavior or abuse patterns. The subnet shows minimal operator risk score (0.1304/1.0).

---

## RELATIONSHIP GRAPH

Total Relationships: 12

Categories:

• Same Network: 6 instances (ES-ADAMO-FTTH)
• DNS Association: 6 instances (cli-5b7e6bde.wholesale.adamo.es)

No external entity associations detected beyond internal network and DNS infrastructure. The IP operates within a contained infrastructure footprint.

---

## SECURITY ACTIONS & RECOMMENDATIONS

Recommended Actions: None

Firewall Rules: Not required

Risk Score: 0 (No action required)

The IP address presents no immediate threat requiring defensive measures. Standard monitoring practices are sufficient given the low-risk profile.

---

## ANALYST NOTES

This IP address belongs to a legitimate telecom infrastructure provider (Adamo Telecom) operating a web server in Spain. The "Tor Exit Nodes" classification appears to be a network role categorization rather than active Tor exit functionality. All security controls are properly implemented, and the IP demonstrates stable, benign operation. No escalation or blocking actions are warranted at this time.

Confidence Level: High

Last Updated: Current Assessment

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.