91.231.218.165📋 Copy

# IP Intelligence Briefing: 91.231.218.165/32

Classification: Low Risk / Minimal Threat

Date of Analysis: 2026-07-29

Risk Score: 25/100

## Executive Summary

Target IP 91.231.218.165 presents minimal threat to organizational networks. The address is associated with SYSTEMA-NET (ASN 57354) under registration entity Khalbad Dmitry, located in the Russian Federation. Current observation data indicates no active malicious activity, no open services, and a clean neighborhood profile.

## Threat Profile

Risk Assessment

• Overall Risk Score: 25/100 (Low)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence: Not applicable (no active abuse signals)
• Blacklist Presence: Listed on 1 of 8 DNSBLs (minimal impact)

Network Classification

• Network Name: SYSTEMA-NET
• ASN: 57354
• CIDR Block: 91.231.218.0/23
• RIR Registry: RIPE
• Network Type: Firewalled / No Services
• Cloud/CDN/Proxy Status: Not applicable

Geolocation Data

• Country: RU (Russia)
• Inferred Coordinates: 61.52°N, 105.32°E
• Geo Confidence: 0.52 (moderate)
• Accuracy Radius: 5,000 km

## Technical Findings

Service Enumeration

• Open Ports: None detected
• TLS Certificate: Not available
• HTTP Banner: Not available
• DNS Resolution: No PTR or forward resolution records
• Email Authentication: No SPF/DMARC records

Control Plane Analysis

• Route Stability: Unstable (isRouteStable: false)
• Route Changes (30d): 0
• RPKI State: Not validated
• DNSSEC: Valid
• BGP Prefix: 91.231.218.0/24

Neighborhood Analysis (91.231.218.0/24)

• Abuse Density: 0
• Classification: Clean
• Neighbor Count: 1
• Sibling IP: 91.231.218.149 (Risk Score: 25)
• Threat Siblings: 0
• Active Siblings: 1

## Historical Signals

Observation Timeline

• Total Observations: 15 signals across monitoring period
• Recent Activity: 2026-07-29
• Ownership Changes: 0 (stable)
• Threat Persistence: 0 days (no persistent malicious behavior)

Signal Types Observed

• Network classification signals
• Traceroute analysis (30 hops)
• Port scanning attempts (no open services)
• Geolocation inference signals
• Ownership verification signals

## Relationship Graph

• Network Relationships: 4 entries linked to SYSTEMA-NET
• Hostname Relationships: None detected
• Organization Relationships: None detected
• Certificate Relationships: None detected
• Related IPs: None

## Recommended Actions

Firewall/IPS Rules

No specific blocking rules recommended at this time due to low-risk profile. The IP demonstrates:

• No active threat indicators
• No open services or ports
• Minimal neighborhood abuse density

Monitoring Recommendations

• Continue standard logging for traffic from this IP
• Monitor for any service enumeration or port scan activity
• Watch for changes in geolocation or ownership patterns

Threat Indicators

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None detected

## Intelligence Assessment

The target IP represents a low-priority defensive concern. Current signals indicate a legitimate, static network resource with no evidence of malicious activity. The absence of open ports and services, combined with a clean neighborhood profile and stable ownership history, supports classification as minimal risk. No immediate defensive action required; routine monitoring sufficient.

---

*This intelligence briefing was generated based on IPDebrief platform data. All findings derived from observed network signals and public registry information.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.