91.203.136.121📋 Copy

# IP Intelligence Briefing: 91.203.136.121/32

Classification: Low Risk

Date: 2026-07-23

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 91.203.136.121 is classified as Low Risk (Risk Score: 25/100) with minimal threat indicators. The IP is associated with a Ukrainian network infrastructure provider (SPIDER-UA-NET, AS45044) and demonstrates stable operational characteristics with no active malicious campaigns detected.

---

## Network Ownership & Geolocation

• Organization: Vasylenko Dmytro (Individual)
• ASN: AS45044 (SPIDER-UA-NET)
• Network Block: 91.203.136.0/22
• Country: Ukraine (UA)
• City: Odessa
• RIR: RIPE
• Abuse Contact: Available via RDAP

---

## Threat Assessment

• Risk Score: 25 (Low)
• Abuse Confidence: Minimal operator score (0.1304)
• Threat Indicators: None detected
• Known Campaigns: None
• Blacklist Status: 1 DNSBL listing out of 8 total lists evaluated
• Campaign Likelihood: Not assessed (no correlated activity)

Notable Characteristics:

• Not a Tor exit node, CDN, proxy, VPN, or hosting service
• No active open ports or services detected (Firewalled/No Services)
• No known attacker reputation
• No spam source classification

---

## Historical Observation

• Total Observations: 15 signals recorded
• Recent Activity: Signals observed on 2026-07-23
• Geolocation Consensus: Ukraine (Odessa region 51), confidence 0.52
• Ownership Stability: No ownership changes detected
• Threat Persistence: 0 days of persistent malicious activity
• Signal Types: Geolocation, ownership, ASN, network classification, and threat detection signals

Historical Signal Breakdown:

1. Geolocation inference: Ukraine, Odessa (confidence: 0.52)

2. Ownership: Vasylenko Dmytro, RIPE (confidence: 0.90)

3. ASN: AS45044 spidernet (confidence: 0.75)

4. Network classification: Not CDN/Tor/VPN/proxy/hosting (confidence: 0.30)

5. Threat detection: has_threats flag present with 1 pulse reference

---

## Network Relationships

• Same Network: 3 relationships identified to SPIDER-UA-NET network
• External Entities: No associated hostnames, organizations, or certificates detected
• Control Plane: Stable BGP routing, DNSSEC valid

---

## Neighborhood Analysis (91.203.136.0/24)

• Subnet Abuse Density: 0
• Total Siblings: 1 neighbor IP detected
• Neighbor IP: 91.203.136.180

- Risk Score: 25 (Low)

- Authority Score: 50

• Risk Distribution: 1 low-risk, 0 medium-risk, 0 high-risk

---

## Recommended Actions

Current Risk Level: Low (25/100)

Action: Monitor only; no immediate blocking or firewall rules recommended.

Suggested Monitoring Parameters:

• Track any changes in threat indicator status
• Monitor for new DNSBL listings
• Observe neighborhood IP 91.203.136.180 for correlated activity
• Watch for service port openings or behavioral changes

Note: Recommendations are probabilistic and should be combined with other intelligence signals before taking action.

---

## Conclusion

IP 91.203.136.121 presents a low-risk profile with no active malicious indicators. The IP is associated with legitimate Ukrainian network infrastructure. Recommended treatment is standard monitoring without blocking or restrictive firewall rules at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.