91.239.208.65📋 Copy

# IPDebrief Intelligence Briefing

Target: 91.239.208.65/32

Classification: LOW RISK / CLEAN

Date: 2026-07-29

---

## Executive Summary

IP address 91.239.208.65 is assessed as LOW RISK with no active threat indicators. The address shows zero risk score, zero blacklist entries, and no known malicious campaigns. Recommended action: Standard monitoring; no blocking required.

---

## Technical Profile

---

## Geolocation

• Country: FR (France)
• Coordinates: 48.54°N, 6.06°E
• Timezone: Europe/Paris
• Accuracy: ±453 km
• Note: Geographic validation flagged as implausible in some signals

---

## Threat Intelligence

• Abuse Confidence Score: None
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: Empty

---

## Network Services

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Service Purpose: Firewalled / No Services
• DNS Records: No forward resolution, no hosted domains
• Email Authentication: No SPF/DMARC records

---

## Network Context

• Subnet Abuse Density: 0 (Clean)
• Neighbors: 1 sibling (91.239.208.22) with null risk score
• Total Active Siblings: 0
• Threat Siblings: 0
• BGP Route Stability: Unstable (isRouteStable: false)
• Route Changes (30d): 0
• DNSSEC: Valid
• DNSBL Listings: 0 of 8 total lists

---

## Historical Observation Summary

15 observations recorded. Notable signals include:

• Geo inconsistencies between US-NY (Comcast) and FR signals in traceroute data
• No persistent malicious behavior detected
• Zero threat persistence days
• Zero threat observation count

---

## Related Entities

• Same Network: DE-L7NETWORKS-GMBH-20220831 (2 relationships)

---

## Recommended Actions

Status: No immediate action required.

The IP address presents no actionable threats. Standard firewall rules apply; no specific blocking or rate-limiting recommended.

---

## Analyst Notes

This IP belongs to a German-based hosting/networking entity (L7 Networks GmbH) with minimal operator footprint. The clean neighborhood profile and absence of threat indicators support continued traffic flow without intervention. Monitor for any changes in network role or threat indicators if this IP becomes a source of inbound traffic.

---

*Report generated via IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.