91.211.36.221📋 Copy

IP Intelligence Briefing: 91.211.36.221

Date: 2026-06-08

---

**1. Core Profile**

• Risk Assessment: Low Risk (Risk Score: 0/100). No active threats, abuse indicators, or malicious campaigns detected.
• Ownership: Registered to Nikolay Mamashin (Russia). No abuse contact details available via RDAP.
• Geolocation:

- Country: Russia (RU)

- Region: Krasnodar Krai

- City: Sochi

- Coordinates: Latitude 43.6, Longitude 39.73

• Network Role: Firewalled / No Services. No open ports, TLS certificates, or HTTP services detected.

---

**2. Threat & Abuse Indicators**

• Threat Observations:

- No malware campaigns, spam, or known attacker activity linked to this IP.

- Zero blacklist entries or DNS-based attacks observed.

• DNS Security:

- SPF and DMARC records detected for domain sochi-online.com (valid, but no email authentication issues).

- DNS resolution errors (timed out) for internal hosts (e.g., 192.168.2.108), suggesting potential network misconfiguration or local resolver issues.

---

**3. Network Relationships**

• Subnet: Part of 91.211.36.0/22 (SOCHI-ONLINE-NET), registered to Sochi-Online Ltd.
• Connected Entities:

- Linked to sochi-online.com (DNS association).

- No direct relationships to other IPs, organizations, or certificates.

---

**4. Neighborhood Analysis**

• Subnet Abuse Density: 0% (no malicious activity detected in the 91.211.36.0/22 subnet).
• Neighbors: No active sibling IPs or threat-related neighbors identified.

---

**5. Observation History**

• Recent Activity:

- Geolocation Inference: Detected in Sochi, Russia (June 8, 2026; 52% confidence).

- Threat Signals: Low-severity threat indicators (21 total observations) linked to network and DNS resolution.

- DNS Records: Valid SPF/DMArc for sochi-online.com, but no email abuse detected.

---

**6. Recommendations**

• Monitoring: Track DNS resolution issues (timed-out queries) and verify network configuration for internal hosts.
• Geolocation: Confirm alignment with Sochi, Russia, given the owner’s location.
• Network Segmentation: Ensure firewalled isolation of this IP, as no services are actively exposed.

Conclusion: 91.211.36.221 is a low-risk, non-malicious IP associated with a Russian entity. No immediate defensive action required, but DNS misconfigurations warrant investigation.

---

*Generated by IPDebrief Threat Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.