91.230.121.134

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP INTELLIGENCE BRIEFING

Target: 91.230.121.134/32

Classification: Moderate Risk | Date: 2026-07-29

Reporting: IPDebrief Threat Intelligence

---

## EXECUTIVE SUMMARY

IP 91.230.121.134 is registered to OWL PROTECT LLC (ASN 6698) in Kyiv, Ukraine. Risk score of 40/100 indicates moderate risk. The subnet (91.230.121.0/24) shows 0% abuse density and is classified as clean. No active threat indicators or known malicious campaigns detected.

---

## OWNERSHIP & GEOLOCATION

Organization: OWL PROTECT LLC
Network Name: OWLPROTECT
ASN: 6698
Registration: RIPE NCC
Geolocation: Kyiv, Ukraine (UA)
Coordinates: 50.458°N, 30.5303°E
Distance from Reference: 1,663.7 km

---

## NETWORK CLASSIFICATION

Indicator	Status
Risk Score	40/100 (Moderate)
Provider Score	0
Authority Score	0
Is Tor Exit	False
Is Known Attacker	False
Is Spam Source	False
Blacklist Count	0
Is Cloud/CDN/Proxy	False
Service Purpose	Multi-Service Host

---

## DNS & SERVICE PROFILE

Reverse DNS: pizzaahte.com
Forward DNS: Unconfirmed (forwardConfirmed: false)
Open Ports:

- TCP/80 (HTTP) - nginx/1.24.0 (Ubuntu)

- TCP/22 (SSH) - OpenSSH_9.6p1 Ubuntu-3ubuntu13.18

- TCP/8443 (HTTPS-alt)

TLS Certificate: CN=uc-blade148-1 (Subject: CN=uc-blade148-1)
Email Security: No SPF/DMARC records configured

---

## THREAT INTELLIGENCE

DNSBL Status: Listed on 2 of 8 total blacklists
Operator Score: 0.1304 (Minimal)
Campaign Correlation: 0 matches
Correlated IPs: 0
Threat Feeds: Empty
Historical Persistence: 0 threat observation days
Is Persistently Malicious: False

---

## OBSERVATION HISTORY (22 Total Signals)

Recent activity (2026-07-29):

HTTP Fingerprinting: nginx/1.24.0, HTTP/1.1, status 200, TTFT 265ms
Geolocation Validation: Average RTT 132.2ms, plausible location confirmed
Service Scanning: Ports 80, 22, 8443 detected; TLS 1.3 with cipher TLS_AES_256_GCM_SHA384
Ownership Stability: No ownership changes observed

---

## NETWORK NEIGHBORHOOD ANALYSIS

Subnet: 91.230.121.0/24
Abuse Density: 0%
Total Siblings: 1
Threat Siblings: 0
Classification: Clean

---

## RELATIONSHIP GRAPH

9 Same Network Links: OWLPROTECT (ASN 6698)
5 DNS Association Links: pizzaahte.com

---

## RECOMMENDED ACTIONS

No immediate blocking recommended. The IP presents moderate risk but lacks active threat indicators. Monitor for:

DNSBL listing changes
New threat indicators
Related activity from pizzaahte.com domain

Firewall Considerations: Standard ingress filtering for ports 22, 80, 8443. No specific egress restrictions warranted based on current profile.

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇦 Ukraine
Region	Kyiv City
City	Kyiv
Timezone	Europe/Kyiv
Latitude	50.46
Longitude	30.53

🏢 Ownership & Registration

Organization	OWL PROTECT LLC
ASN	AS6698
Network Name	OWLPROTECT
CIDR Block	91.230.121.0/24
RIR	RIPE
Country	UA
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	pizzaahte.com
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnames	`pizzaahte.com`

🔐 DNS Hygiene

Hygiene Score	20% (Poor)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Unknown
Service Purpose	Multi-Service Host
Network Tier	Unknown — Insufficient routing data to classify

No specific classification

🔌 Services & Open Ports

Port	Service	Protocol	Banner
80	http	tcp	—
22	ssh	tcp	SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18
8443	https-alt	tcp	—
Closed Ports	25, 443, 3389, 8080 (3 open / 7 scanned)

Server	nginx/1.24.0 (Ubuntu)
HTTP Title	—
SSH Version	SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18

🔐 TLS Certificate

A self-signed certificate was detected. This is common for development servers, internal services, or IoT devices.

⚠️

CN=uc-blade148-1

Issued by CN=uc-blade148-1

Self-signed: Yes

SANs	uc-blade148-1
Valid From	2026-06-09T17:09:05+00:00
Valid Until	2036-06-06T17:09:05+00:00
TLS Protocol	Tls13
Cipher Suite	TLS_AES_256_GCM_SHA384
Signature Algorithm	sha256RSA
Validity Period	3650 days
Serial Number	76E74D9287C2BCBE63E4A9450AC4E5A76D1B3DC9
Thumbprint	F8D3EA2A1B41FBF2D6AD0E54099D869ABA9CB75A

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	35%	2	2
routing	25%	1	1
services	25%	1	1
ownership	0%	0	0
reputation	25%	1	1
geolocation	25%	1	1
Overall	22%	6	6

Coverage: 5/6 dimensions · Data sufficiency: partial

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-07-22 13:24:59 UTC
Last Seen	2026-07-29 14:16:24 UTC
Profile Built	2026-07-29 14:29:19 UTC
Data Freshness	Live
Signal Types	26
Total Observations	26

🔍 26 signal types · 26 observations collected

This report is generated from 26+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

91.230.121.134📋 Copy