91.92.240.38📋 Copy

IP Intelligence Briefing: 91.92.240.38

Date: 2026-06-13

---

**1. Risk Profile**

• Overall Risk: Moderate (Risk Score: 40)
• Threat Indicators: No active malware campaigns, spam, or known attacker associations.
• Network Role: Firewalled / No Services (no open ports or TLS services detected).
• Geolocation: London, UK (GB).

---

**2. Observational History**

• Recent Activity (Last 30 Days):

- Listed in 2 DNSBLs (high-severity risk).

- DNSSEC validation confirmed, but no reverse DNS (PTR) records found.

- BGP origin: OMEGATECH-AS (Turkey, RIPE NCC).

- No TLS/HTTP services or server banners detected.

---

**3. Network Relationships**

• No direct relationships (hostnames, subnets, or organizations) linked to this IP.
• BGP Context:

- Prefix: `91.92.240.0/24`

- ASN: 202412 (OMEGATECH-AS)

- Route stability: Unstable (route changes detected).

---

**4. Subnet Neighborhood**

• Subnet: `91.92.240.0/24`
• Neighbor Risk Distribution:

- High Risk: 2 IPs (65–70 score)

- Medium Risk: 3 IPs (25–55 score)

- Low Risk: 0 IPs

• Abuse Density: 0% (subnet not flagged for abuse).

---

**5. Actionable Insights**

• Monitor Neighbors: The high-risk neighbors (e.g., `91.92.240.5`, `91.92.240.217`) may indicate a broader network of interest.
• Verify DNS Configuration: No PTR records or email authentication (SPF/DKIM) detected—potential misconfiguration or spoofing risk.
• BGP Anomalies: Unstable routing and route changes could signal network compromise or misconfiguration.

---

Recommendation:

• Flag the IP for further investigation due to DNSBL listings and unstable BGP routing.
• Monitor neighboring IPs for potential lateral movement or shared infrastructure.
• Validate DNSSEC and email security configurations to mitigate spoofing risks.

Source: IPDebrief Threat Intelligence Platform.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.