91.198.108.243📋 Copy

# IP Intelligence Briefing: 91.198.108.243/32

## Executive Summary

IP address 91.198.108.243 is classified as Low Risk with an overall risk score of 15/100. The address is associated with Armenian hosting infrastructure (HayHost) and presents no immediate threat indicators. No active malicious campaigns, blacklist entries, or abuse patterns have been detected.

## Ownership and Registration

• ASN: 216058
• Organization: AM-AMWEB-MNT
• Netname: HayHost
• RIR: RIPE
• CIDR Block: 91.198.108.0/24
• Country: Armenia (AM)
• Geolocation: 40.25°N, 45°E

## Network Classification and Services

• Infrastructure Type: Firewalled / No Services
• Open Ports: None detected
• Service Purpose: No active web services or TLS certificates
• CDN/Cloud/VPN/Proxy: Not detected
• Tor Exit: No
• Anycast: No

## Threat Indicators

• Blacklist Count: 0
• Abuse Confidence Score: Not applicable
• Known Campaigns: None detected
• Threat Feeds: No matches
• DNSBL Listings: 1 out of 8 total lists
• Known Attacker: No
• Spam Source: No

## Neighborhood Analysis

• Subnet: 91.198.108.0/24
• Abuse Density: 0.0 (Clean)
• Risk Distribution: No high/medium/low risk IPs detected in subnet
• Threat Siblings: 0
• Total Siblings: 1 (including target)

## Behavioral Analysis

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Auto-Banned: No
• Persistently Malicious: No
• Active Attacker: No

## Network Connectivity and Routing

• Traceroute Hops: 13
• Transit Network: Comcast
• Time-to-Last-Hop: 157.8ms
• Route Stability: Stable
• BGP Prefix: 91.198.108.0/24
• RPKI State: Valid
• DNSSEC: Valid

## DNS Analysis

• PTR Hostnames: None
• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Auth: No SPF or DMARC records

## Control Plane Data

• Origin ASN: 216058
• Route Changes (30d): 0
• IS-MOAS: No
• Delegation Age: Not reported

## Historical Observations

Fourteen signal observations recorded, most recent from July 2026. Key historical indicators:

• Classification: Clean with inherited risk of 0
• Geolocation Validation: Plausible (Armenia), 3194.5km distance, 155-158ms RTT
• Ownership Changes: 0
• Threat Persistence: 0 days

## Intelligence Assessment

The IP 91.198.108.243 demonstrates a benign profile with no evidence of malicious activity. The absence of open services, combined with zero threat indicators and clean neighborhood metrics, indicates this address is either:

1. A dormant or decommissioned IP

2. Internal infrastructure without public-facing services

3. Legitimate hosting infrastructure with strict security controls

## Recommended Actions

• Firewall Policy: Permissive by default; no blocking required
• Monitoring: Standard logging recommended
• Threat Hunting: No priority for this IP; consider monitoring if observed in suspicious traffic patterns
• Investigation Priority: Low

Classification: Low Risk — No Immediate Threat

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.