91.189.91.82
Intelligence Briefing: 91.189.91.82/32
Overview
The IP address 91.189.91.82 was registered to Canonical Ltd Admin under ASN 41231 (CANONICAL-CORE). Reputation analysis classified the host as Low Risk with a risk score of 25.
Infrastructure
The node operated as a web server running Apache 2.4.52 on Ubuntu. DNS resolution confirmed ownership of ubuntu-mirror-2.ps6.canonical.com. TLS certificates were issued by Let's Encrypt for security.ubuntu.com. Ports 80 and 443 were open.
Threat Assessment
No active campaigns were associated with the address. Threat indicators remained absent, though one DNSBL listing was recorded within the control plane. The subnet neighborhood 91.189.91.82/24 showed zero threat siblings and an abuse density of 0. Behavioral analysis reported no honeypot hits or enumeration strikes.
Data Integrity
Signal contradictions were observed regarding geolocation and Round-Trip Time (RTT). Geo sources disagreed on country assignment (US vs GB), while RTT measurements contradicted the physical distance for the claimed location. Ownership consistency was verified via FCR DNS.
Recommendation
The profile recommendation was to monitor the address due to signal contradictions and a single DNSBL listing, despite the low-risk classification and absence of active malicious indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Canonical Ltd Admin |
| ASN | AS41231 |
| Network Name | CANONICAL-CORE |
| CIDR Block | 91.189.88.0/21 |
| RIR | RIPE |
| Country | GB |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ubuntu-mirror-2.ps6.canonical.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ubuntu-mirror-2.ps6.canonical.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 5/5 domains |
| DMARC | 5/5 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 5 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | security.ubuntu.com |
| Valid From | 2026-08-03T22:46:34+00:00 |
| Valid Until | 2026-11-01T22:46:33+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
🛡️ Public Network Snapshot
| Origin ASN | AS41231 |
| Network Prefix | 91.189.91.0/24 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 8 |
| routing | 8% | 1 | 1 |
| services | 25% | 2 | 4 |
| ownership | 17% | 2 | 3 |
| reputation | 29% | 1 | 6 |
| geolocation | 22% | 2 | 4 |
| Overall | 22% | 10 | 26 |
| Data Coherence | Mixed Signals (60%) — 2 contradiction(s) |
| Attribution | Low (40%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: US, GB
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 17:04:58 UTC |
| Last Seen | 2026-09-29 16:05:36 UTC |
| Profile Built | 2026-09-29 16:14:55 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 48 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 91.189.91.82
Who owns the IP address 91.189.91.82?
91.189.91.82 is registered to Canonical Ltd Admin. The address falls within the 91.189.88.0/21 network block. Registration is held at RIPE.
Where is 91.189.91.82 located?
Geolocation data places 91.189.91.82 in Boston, MA, United Kingdom. The local time zone is Europe/London. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 91.189.91.82 malicious or safe?
91.189.91.82 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 91.189.91.82?
The reverse DNS (PTR) record for 91.189.91.82 is ubuntu-mirror-2.ps6.canonical.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
What ports are open on 91.189.91.82?
Responsive ports observed on 91.189.91.82 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.