{"ip":"91.246.213.111","overview":{"reputation":"High Risk","riskScore":80,"providerScore":0,"authorityScore":0,"stabilityScore":0,"stabilityLabel":null,"riskBreakdown":null},"ownership":{"asn":198133,"orgName":"AIR-NET-MNT","netname":"AIR-NET","abuseContact":"Available via RDAP","rir":"ripe","registrationDate":null,"cidrBlock":"91.246.208.0/21"},"geolocation":{"country":"PL","countryCode":"PL","region":"12","city":"Przeciszow","latitude":51.92,"longitude":19.15,"timezone":"Europe/Warsaw","accuracyRadiusKm":400,"geoSourceCount":1,"geoConsensus":true,"geoPlausible":null},"threat":{"indicators":[],"reputationSources":[],"abuseConfidenceScore":null,"isTorExit":false,"isKnownAttacker":false,"isSpamSource":false,"blacklistCount":0,"pulsediveRisk":null,"knownCampaigns":[],"threatFeeds":[]},"networkRole":{"provider":null,"infrastructureType":null,"connectionType":null,"isCloud":false,"isCdn":false,"isVpn":false,"isProxy":false,"isTor":false,"isHosting":false,"isMobile":false,"isResidential":false,"isBogon":false,"isAnycast":false,"servicePurpose":"Firewalled / No Services"},"mobileCarrier":null,"dns":{"ptrHostnames":[],"forwardConfirmed":false,"domain":null,"hostedDomains":[],"hostedDomainCount":0,"emailAuth":{"hasSPF":false,"hasDMARC":false,"spfRecord":null,"dmarcRecord":null,"txtRecordCount":0,"domain":null},"forwardResolutionCount":0,"forwardHostnames":[]},"services":{"openPorts":[],"tlsCert":null,"httpTitle":null,"serverBanner":null,"certificates":null},"actions":{"recommendations":[]},"evidence":{"sources":[]},"controlPlane":{"originAsn":198133,"bgpPrefix":"91.246.208.0/21","asPath":null,"rpkiState":null,"irrConsistency":null,"routeChanges30d":0,"isRouteStable":false,"isMoas":false,"dnssecValid":true,"hasCaa":false,"dnsblListedCount":4,"dnsblTotalLists":8,"operatorScore":0.1304,"operatorLabel":"Minimal","delegationAgeDays":null,"rirRegistry":null},"temporal":{"ownershipChanges":0,"avgOwnershipDays":null,"threatPersistenceDays":0,"threatObservationCount":1,"isPersistentlyMalicious":false},"neighborhood":{"subnet":"91.246.213.111/24","abuseDensity":0.5,"classification":"mixed","inheritedRisk":7,"totalSiblings":6,"activeSiblings":1,"threatSiblings":3},"campaign":{"likelihood":null,"certMatches":0,"bannerMatches":0,"correlatedIps":0,"certSubjects":[]},"geoValidation":{"geoPlausible":false,"distanceKm":null,"minRttMs":null,"avgRttMs":null,"probeCount":0,"violation":null,"minimumPossibleRttMs":null},"fingerprint":{"server":null,"statusCode":null,"hasHsts":false,"hasCsp":false,"hasHttp2":false,"faviconHash":null,"bodyHash":null,"poweredBy":null,"generator":null,"ttfbMs":null,"httpVersion":null,"hasReferrerPolicy":false,"hasPermissionsPolicy":false,"headerOrder":[]},"emailReputation":{"reputation":null,"hasScore":false,"senderScore":null},"traceroute":{"hopCount":0,"firstHopRttMs":null,"lastHopRttMs":null,"timedOutHops":0,"transitNetworks":[]},"behavioral":{"honeypotHits":0,"enumerationStrikes":0,"wafViolations":0,"totalIncidents":0,"categories":[],"autoBanned":false,"isActiveAttacker":false},"confidence":{"overall":0.2062,"dataSufficiency":1,"coveredDimensions":6,"totalDimensions":6,"label":"Very Low"},"attribution":{"confidence":50,"label":"Moderate","hasOwnership":true,"hasFcrDns":false,"geoConsensus":true,"geoPlausible":true,"hasRpkiValid":false,"hasIrrMatch":false},"dataFreshness":{"newestObservation":"2026-06-06T22:31:05.0482250+00:00","oldestSignalAge":"2026-05-23T04:59:09.3193830+00:00","signalTypesPresent":16,"totalObservations":16,"freshnessLabel":"Live"},"contradictions":[],"intent":{"classification":"Unknown Intent","reason":"Insufficient data to classify intent"},"recommendation":{"action":"Block","severity":"critical","reason":"High risk score with strong threat evidence","firewallRules":[{"format":"iptables","rule":"iptables -A INPUT -s {ip} -j DROP  # IPDebrief: Block — High risk score with strong threat evidence"},{"format":"nginx","rule":"deny {ip};  # IPDebrief: Block — High risk score with strong threat evidence"},{"format":"pf","rule":"block in quick on egress from {ip}  # IPDebrief: Block — High risk score with strong threat evidence"}]},"dnsHygiene":{"score":20,"label":"Poor","components":{"spf":false,"dmarc":false,"fcrDns":false,"dnssec":true,"caa":false}},"coherence":{"score":100,"label":"Consistent","contradictionCount":0},"networkTier":{"tier":"Unknown","reason":"Insufficient routing data to classify","operatorScore":0.1304,"hasRpki":false,"hasIrr":false,"ixpCount":0},"threatActor":{"type":"Blacklisted Host","reason":"Listed on 4 DNS blocklists","tags":["blacklisted"]},"narrative":null,"meta":{"firstSeen":"2026-05-13T12:13:59.408187+00:00","lastSeen":"2026-06-14T17:37:39.494093+00:00","profileComputed":"2026-06-06T22:32:12.764083+00:00","product":"IPDebrief","copyright":"Copyright © 2026 Jason Alberino. All rights reserved."}}