91.240.165.23📋 Copy

# IP Intelligence Briefing: 91.240.165.23

## Executive Summary

IP 91.240.165.23 is classified as Low Risk with a risk score of 0. The address is associated with FastLink_SHPK (ASN 215883) under RIPE registry registration. No active threat indicators, blacklist listings, or malicious campaigns were detected. The IP is currently firewalled with no open services.

---

## Profile Overview

Ownership & Registration

• Organization: FastLink_SHPK
• ASN: 215883 (ilirdaka-ripe)
• Netname: FastLink_SHPK
• CIDR Block: 91.240.165.0/25
• RIR: RIPE
• Abuse Contact: Available via RDAP

Geolocation

• Country: GB (United Kingdom)
• City: London
• Timezone: Europe/London
• Geo Sources: 2 (consensus: false, plausible: false)
• Note: Geo-validation indicates inconsistencies in location data

Network Classification

• Infrastructure Type: Firewalled / No Services
• Open Ports: None detected
• Service Purpose: No active services
• Not Classified: Not cloud, CDN, VPN, proxy, Tor, hosting, mobile, residential, bogon, or anycast

---

## Threat Intelligence

Threat Indicators

• Risk Score: 0
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: Empty
• Abuse Confidence Score: Not available
• Reputation Sources: None detected

Email Authentication

• Domain: fastlink.al
• SPF: Configured (v=spf1 include:zohomail.eu -all)
• DMARC: Configured (p=quarantine)
• TXT Record Count: 4
• Status: Both SPF and DMARC records present

Control Plane Data

• Origin ASN: 215883
• BGP Prefix: 91.240.165.0/24
• Route Stability: False
• MOAS Status: No
• DNSSEC: Valid
• DNSBL Listed: 0 of 8 total lists

---

## Observation History

Total observations: 14

Recent activity shows consistent DNS and ASN resolution patterns without escalation in threat signals. Key observations include:

• ASN 215883 registered to FastLink - FastLink SHPK, AL (RIPE, allocated 2020-12-23)
• DNSSEC validation confirmed (dnssec_valid: true)
• Domain fastlink.al with SPF and DMARC configuration
• No persistent malicious behavior detected (threatPersistenceDays: 0, threatObservationCount: 0)

---

## Relationship Graph

1. Same Network: FastLink_SHPK

2. DNS Association: ptr.fastlink.al

---

## Neighborhood Analysis (/24 Subnet)

• Subnet: 91.240.165.0/24
• Total Siblings: 2
• Active Siblings: 0
• Abuse Density: 0

Neighbor IPs

Risk Distribution: 2 low risk, 0 medium, 0 high

Note: Neighbor IPs show low-to-moderate risk scores but no active threats.

---

## Behavioral Indicators

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

## Recommended Actions

No immediate blocking or filtering recommendations are warranted based on current risk profile. However, consider:

1. Monitor for changes in service state (currently firewalled)

2. Review neighbor IP risk scores periodically (91.240.165.9 and 91.240.165.15)

3. Validate geo-location inconsistencies if business logic requires UK presence

4. Maintain current allow or neutral stance unless threat indicators emerge

---

## Assessment

IP 91.240.165.23 presents no current threat to organizational security. The address belongs to a legitimate ISP infrastructure (FastLink_SHPK) with proper DNS and email authentication configurations. No malicious activity, blacklist listings, or suspicious behavior were observed. Standard monitoring practices apply.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.