Threat Intelligence Briefing: 94.103.180.66/32
Summary
The IP address 94.103.180.66 was classified as Low Risk with a risk score of 25. Ownership analysis attributed the address to Inter.link Network Operations (ASN 5405), registered under the netname INTERLINK-BACKBONE within the RIPE registry.
Observations
Geolocation consensus placed the host in London, GB, with a timezone of Europe/London. No open services or ports were detected, indicating the host was firewalled. Threat indicators yielded no matches for known campaigns or attacker behavior, and the address was not identified as a Tor exit node. Control plane data noted one DNSBL listing against the address, while the broader subnet (94.103.180.0/24) maintained a clean classification with an abuse density of 0.05.
Timeline
The first observation occurred on 2026-08-29, with the latest signal recorded on 2026-09-07. The asset demonstrated zero threat persistence days and no correlated IPs across campaigns.
Recommendations
Analysis advised monitoring the address with low severity. The recommendation was based on the clean neighborhood classification and lack of active threat indicators, despite a data sufficiency score of 0.8333.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Inter.link Network Operations |
| ASN | AS5405 |
| Network Name | INTERLINK-BACKBONE |
| CIDR Block | 94.103.180.0/25 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | r5-fra1-de.as5405.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | r5-fra1-de.as5405.net |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-29 06:25:14 UTC |
| Last Seen | 2026-09-18 15:39:12 UTC |
| Profile Built | 2026-09-18 15:52:05 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 34 |
Full dossier details are available via our API.