91.197.169.29📋 Copy

# IP INTELLIGENCE BRIEFING: 91.197.169.29/32

## Executive Summary

IP address 91.197.169.29 presents a LOW RISK profile with an overall risk score of 25. The address is associated with legitimate Ukrainian infrastructure under RIPE registry allocation (AS12963) and shows no active threat indicators.

---

## Ownership & Network Context

• Organization: Dmytro O. Redchuk (UA-LDC)
• ASN: 12963
• Network Block: 91.197.168.0/22
• RIR: RIPE
• Geolocation: Kyiv, Ukraine (UA)
• Abuse Contact: Available via RDAP

The IP is assigned to a legitimate Ukrainian network operator with established BGP routing (91.197.168.0/22). Ownership remains stable with no recent changes detected.

---

## Threat Assessment

Risk Score: 25 / 100 (Low Risk)

Threat Indicators:

• No known attacker activity
• No Tor exit node functionality
• No spam source classification
• Zero blacklisting on major threat feeds
• No associated malware campaigns

DNSBL Status: Listed on 1 of 8 monitored DNSBLs (low impact)

---

## Network Behavior Analysis

• Service Status: Firewalled / No services detected
• Open Ports: None
• TLS Certificate: None present
• Network Classification: Clean subnet classification

Subnet Neighborhood (91.197.169.0/24):

• Abuse density: 0%
• Threat siblings: 0
• Active siblings: 0
• Classification: Clean

The immediate /24 neighborhood shows no malicious activity, indicating this is not part of a compromised subnet cluster.

---

## DNS & Infrastructure Details

• PTR Record: 91.197.169.29.intraffic.ua
• Forward Resolution: 91.197.169.29.intraffic.ua (forward confirmed: false)
• Email Authentication: SPF and DMARC records present
• DNSSEC: Valid
• Route Stability: Unstable (false)

---

## Temporal Analysis

Observation History (19 signals):

• Recent observations from July 2026
• Consistent geolocation signals pointing to Ukraine
• No threat persistence indicators
• Zero threat observation count
• Not classified as persistently malicious

Behavioral Indicators:

• No honeypot hits
• No enumeration activity detected

---

## Recommended Actions

Current Risk Level: LOW

Firewall Recommendations: No specific blocking rules required at this time.

Monitoring Guidance:

• Standard logging and monitoring recommended
• No immediate blocking or filtering actions advised
• Consider monitoring for future changes in service status or threat indicators

---

## Intelligence Conclusion

This IP address represents legitimate infrastructure in Ukraine with no current malicious activity. The low risk score, clean neighborhood classification, and absence of threat indicators support continued standard monitoring rather than defensive blocking actions. No immediate incident response or mitigation is warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.