91.228.33.22📋 Copy

IP Intelligence Briefing: 91.228.33.22/32

Date: 2026-06-06

---

**1. Core Profile**

• Risk Score: 55/100 (Moderate Risk)
• Ownership: Registered to MNT-INSITE-SPZOO (Poland, RIPE)
• Geolocation: Rozprza, Łódź Voivodeship, Poland (51.92°N, 19.15°E)
• Network Role: Firewalled / No Services (no open ports, TLS, or HTTP indicators)
• Threat Indicators: No known malicious activity, spam, or attack campaigns

---

**2. Observation History**

• Latest Signals (30 Days):

- Minimal risk score (0.13) with low confidence (0.23).

- Geolocation validated to Rozprza, Poland.

- BGP prefix 91.228.32.0/22 registered to VATUS (Poland).

- No persistent malicious behavior or threat persistence.

---

**3. Relationships**

• Linked Entities:

- Subnet 91.228.33.22/24 (57 total IPs, 21 active).

- Associated with VATUS (ASN 56838).

• Risk Context: No direct ties to known adversaries or campaigns.

---

**4. Neighborhood Analysis**

• Subnet Abuse Density: 26.3% (15 high-risk, 29 medium-risk, 13 low-risk neighbors).
• Notable Neighbors:

- 91.228.33.5 (Risk Score: 80)

- 91.228.33.7 (Risk Score: 55)

- 91.228.33.13 (Risk Score: 55)

• Action Required: Monitor high-risk neighbors for lateral movement or shared infrastructure risks.

---

**5. Security Recommendations**

• Firewall Rules:

- Block IP via:

```bash

iptables -A INPUT -s 91.228.33.22 -j DROP

nft add rule inet filter input ip saddr 91.228.33.22 drop

```

- Update WAF rules (Cloudflare/AWS) to block this IP.

• Monitoring:

- Increase logging verbosity for traffic originating from this IP.

- Investigate high-risk neighbors for potential compromise.

---

Conclusion:

The IP exhibits moderate risk with no direct malicious indicators. However, its subnet contains high-risk neighbors, warranting closer scrutiny. Monitor traffic and consider isolating the subnet to mitigate potential lateral threats.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.