91.185.198.177📋 Copy

IP Intelligence Briefing: 91.185.198.177

*Generated via IPDebrief Threat Intelligence Platform*

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership:

- ASN: 41828 (TELEMACH-MNT)

- Registry: RIPE

- Country: Slovenia (SI)

- ISP: Telemach-NET

• Geolocation:

- City: Slovenia (SI)

- Latitude: 46.08, Longitude: 15

- Timezone: Unknown

• Network Role:

- Web Server (HTTP/HTTPS, Apache 2.4.62)

- No TLS certificate detected

- No CDN/VPN/Proxy/Hosting indicators

---

**2. Threat & Abuse Indicators**

• Threat Score: 0 (No malicious activity detected)
• Abuse Density: 0 (Clean subnet)
• DNS Associations:

- Linked to `mail5.xhosting.si` (SPF/DKIM records present)

• Routing:

- Stable BGP path (AS 3303 → 3212 → 41828)

- No route instability or MOAS flags

---

**3. Historical Observations**

• Signal Stability:

- Consistent geolocation and DNS records since 2026-05-29

- No spikes in threat indicators or network anomalies

• Key Trends:

- Low-risk profile with no recent malicious activity

---

**4. Relationships & Network Context**

• Subnet: 91.185.198.0/24 (No active neighbors detected)
• Connected Entities:

- Telemach-NET (same network)

- `mail5.xhosting.si` (DNS hostname)

• Email Security:

- SPF and DMARC records present for `mail5.xhosting.si`

---

**5. Recommendations**

• Monitoring:

- Track DNS and HTTP services for unexpected changes (e.g., new certificates, server banners).

• Firewall:

- Allow traffic on ports 80/443 for legitimate web server operations.

• Validation:

- Verify `mail5.xhosting.si` legitimacy via DNSSEC and email security checks.

---

Conclusion:

This IP is associated with a low-risk, stable web server in Slovenia. No malicious activity or abuse indicators detected. Monitor for unexpected changes in services or DNS associations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.