IP Intelligence Briefing: 46.130.115.203
Date: 2026-06-18
---
**Key Risk Indicators**
- Risk Score: 80 (High Risk)
- Network Role: Residential (potentially vulnerable to DDoS or spoofing)
- Ownership: MNT-K-Telecom (Armenia)
- Geolocation: Yerevan, Armenia (latitude 40.18, longitude 44.51)
---
**Threat Observations**
1. DNS Security:
- Linked to domain viva.am with SPF and DMARC records.
- 5/8 DNSBL listings (high abuse risk).
2. Network Activity:
- Open ports: HTTP (80), HTTPS (443), HTTP-alt (8080), HTTPS-alt (8443).
- No TLS certificate or server banners detected.
3. Historical Signals:
- 23 observations over 30 days, including DNS resolution and abuse confidence checks.
- No persistent malicious activity detected.
---
**Relationships & Neighbors**
- Network: Subnet 46.130.115.203/24 (clean classification, 0 abuse density).
- Linked Entities:
- Viva-Armenia (same network).
- No neighboring IPs reported.
---
**Actionable Insights**
1. Monitor Traffic:
- Block traffic from this IP on ports 80, 443, 8080, and 8443 to mitigate potential data exfiltration or C2 activity.
2. Investigate DNSBL Listings:
- Verify if the IP is part of a spam or malicious network (5/8 DNSBL listings).
3. Check Domain Activity:
- Analyze viva.am for suspicious email configurations or phishing attempts.
4. Network Segmentation:
- Isolate residential subnets to reduce exposure to spoofed traffic.
---
Conclusion:
This residential IP in Armenia shows no direct malicious indicators but has high DNSBL listings and open HTTP/HTTPS ports. Monitor traffic and investigate linked domains for potential threats.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | MNT-K-Telecom |
| ASN | AS43733 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | RIPE |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 203.115.130.46.in-addr.viva.am |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 203.115.130.46.in-addr.viva.am |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 8080 | http-alt | tcp | โ |
| 8443 | https-alt | tcp | โ |
| Closed Ports | 22, 25, 3389 (4 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 26% | 2 | 3 |
| ownership | 20% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-07 23:04:22 UTC |
| Last Seen | 2026-06-26 18:11:22 UTC |
| Profile Built | 2026-06-26 14:53:37 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.