91.234.138.68📋 Copy

## IP Intelligence Briefing: 91.234.138.68

Executive Summary

IP address 91.234.138.68 is a Ukrainian residential or private network endpoint located in Chernivtsi (UA). The IP carries a risk score of 30 with low risk classification. No active threat indicators or open services detected. The endpoint operates within a subnet showing mixed risk characteristics with 3 flagged threat siblings.

Network Ownership and Geolocation

• ASN: 197218 (PP Dmutrashko Evgeny Vitalievich)
• Organization: PP Dmutrashko Evgeny Vitalievich
• Netname: LANPRO-NET
• CIDR Block: 91.234.136.0/22
• Registration RIR: RIPE
• Geolocation: Ukraine, Chernivtsi (Region 77)
• Coordinates: 48.38°N, 31.17°E
• Timezone: Europe/Kyiv
• Location Accuracy: 500km radius

Network Classification and Services

• Infrastructure Type: Residential/Private Network
• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None
• DNS Resolution: No PTR records; forward resolution not confirmed
• Email Auth: No SPF, DMARC, or TXT records detected

Threat Intelligence Assessment

• Risk Score: 30 (Low Risk)
• Abuse Confidence Score: Not available
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Status: 0 confirmed blacklists
• DNSBL Listings: 2 listings across 8 total lists
• Pulsedive Risk: Not available

Control Plane Analysis

• Route Stability: Unstable (isRouteStable: false)
• RPKI State: Not validated
• IRR Consistency: Not available
• Operator Score: 0.1304 (Minimal)
• BGP Origin ASN: 197218
• Route Changes (30d): 0
• DNSSEC: Valid

Historical Signal Observations

Fourteen observations recorded, most recent from July 25, 2026. Key signals include:

• Geolocation inference: Ukraine (UA), confidence 52%
• ASN confirmation: AS197218, confidence 75%
• Ownership data: PP Dmutrashko Evgeny Vitalievich, confidence 90-95%
• Threat signals detected in some observations (pulse_count: 1 in one signal)
• No persistent malicious behavior flagged

Neighborhood Analysis

Subnet: 91.234.138.68/24

• Abuse Density: 0.1 (10%)
• Classification: Mostly Clean
• Total Siblings: 30
• Active Siblings: 14
• Threat Siblings: 3
• Risk Distribution: High: 0, Medium: 23, Low: 6

Notable neighboring IPs with elevated risk scores:

• 91.234.138.250: Risk 70
• 91.234.138.14, 91.234.138.28, 91.234.138.47, 91.234.138.52, 91.234.138.58, 91.234.138.75, 91.234.138.107, 91.234.138.148, 91.234.138.165, 91.234.138.166, 91.234.138.173, 91.234.138.184, 91.234.138.189, 91.234.138.191, 91.234.138.197, 91.234.138.199, 91.234.138.220, 91.234.138.226, 91.234.138.234, 91.234.138.244, 91.234.138.252: Risk 55
• 91.234.138.4, 91.234.138.80: Risk 40
• 91.234.138.106: Risk 15

Relationships

Primary network relationship: LANPRO-NET (multiple same-network connections identified)

Recommended Actions

• Monitor for service emergence (currently no open ports detected)
• Consider blocking if destination-based threat activity is observed
• Review neighborhood IPs with risk scores ≥50 for potential lateral threat assessment
• No immediate blocking required for inbound traffic

Conclusion

IP 91.234.138.68 represents a low-risk residential endpoint in Ukraine. The subnet exhibits mixed risk characteristics with several high-risk siblings, suggesting potential abuse activity in the broader /24. No direct threat indicators for this specific IP address. Routine monitoring recommended; escalation warranted only if service exposure or threat indicators develop.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.