# Intelligence Briefing: 95.108.213.3/32
Classification: LOW RISK โ Legitimate Infrastructure
Analysis Date: Current
Platform: IPDebrief Threat Intelligence
---
## EXECUTIVE SUMMARY
IP address 95.108.213.3 is a low-risk infrastructure endpoint belonging to YANDEX LLC (YANDEX-95-108-213-0 network). The IP resolves to a Yandex Spider hostname (95-108-213-3.spider.yandex.com), indicating legitimate web crawling infrastructure. No threat indicators, malware signatures, or malicious activity observed. No blocking or mitigation actions recommended.
---
## OWNERSHIP & INFRASTRUCTURE
| Attribute | Value |
|---|---|
| **Organization** | YANDEX LLC |
| **Network Block** | 95.108.213.0/24 |
| **ASN** | Not Provided |
| **RIR** | RIPE |
| **Country** | RU (Russia) |
| **DNS Hostname** | 95-108-213-3.spider.yandex.com |
| **Forward DNS** | Confirmed |
| **Reverse DNS** | Confirmed |
Network Classification: Infrastructure service purpose. No open ports detected (firewalled/no services). Not a CDN, proxy, VPN, Tor exit, or hosting provider.
---
## THREAT ASSESSMENT
| Indicator | Status |
|---|---|
| **Overall Risk Score** | 0.0 (Low Risk) |
| **Abuse Confidence** | Not Applicable |
| **Blacklist Count** | 0 |
| **Threat Feeds** | None |
| **Known Campaigns** | None |
| **Is Tor Exit** | No |
| **Is Known Attacker** | No |
| **Is Spam Source** | No |
Control Plane Validation:
- DNSSEC: Valid
- CAA Records: Present
- Route Stability: Stable (0 changes in 30 days)
- Operator Score: 0.3478 (Basic)
---
## NEIGHBORHOOD ANALYSIS
Subnet: 95.108.213.0/24
- Total Siblings: 82
- Abuse Density: 0.0 (Minimal)
- Risk Distribution: 0 High / 3 Medium / 77 Low
- Threat Siblings: 0
Notable Neighbors:
- 95.108.213.1 (Risk: 25, Authority: 60)
- 95.108.213.78 (Risk: 25, Authority: 60)
- 95.108.213.79 (Risk: 25, Authority: 60)
---
## OBSERVATION HISTORY
Total Observations: 16
Recent Activity Window: July 29, 2026
Key Historical Signals:
- Geolocation: RU (Russia) โ Confidence 0.52
- Control Plane Validation: Basic operator score โ Confidence 0.60
- Threat Assessment: No malicious indicators โ Confidence 0.27
- Ownership Stability: 0 changes โ Confidence 0.85
- Persistent Malicious Activity: None detected
Temporal Analysis: No ownership changes, no threat persistence, zero threat observations. IP demonstrates stable infrastructure behavior.
---
## RELATIONSHIP MAPPING
Associated Entities:
1. DNS Association: 95-108-213-3.spider.yandex.com
2. Network Block: YANDEX-95-108-213-0 (3 entries)
3. Same Network: YANDEX-95-108-213-0 (3 entries)
Total Relationships: 6
---
## RECOMMENDATIONS & ACTIONS
Firewall/Blocking Action: NOT REQUIRED
- Risk score: 0.0
- No recommendations generated
- No firewall rules required
- No WAF rules required
SOC Analyst Guidance:
- Allow traffic through standard firewall policies
- No threat indicators warrant blocking
- Monitor as legitimate infrastructure endpoint
- No correlation with active campaigns
---
## INTELLIGENCE CONCLUSION
IP 95.108.213.3 represents Yandex's web spider infrastructure operating within the YANDEX-95-108-213-0 network block. The endpoint demonstrates legitimate service behavior with no malicious indicators, threat signatures, or abuse patterns. The subnet exhibits minimal abuse density (0.0), with only 3 of 82 sibling IPs showing moderate risk scores. Historical analysis confirms stable ownership and lack of persistent malicious activity.
Risk Rating: LOW
Action Required: None
Classification: Legitimate Infrastructure
---
*Analysis generated by IPDebrief Threat Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | YANDEX LLC |
| ASN | โ |
| Network Name | YANDEX-95-108-213-0 |
| CIDR Block | 95.108.213.0/24 |
| RIR | RIPE |
| Country | RU |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 95-108-213-3.spider.yandex.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 95-108-213-3.spider.yandex.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 26% | 7 | 8 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-24 02:14:33 UTC |
| Last Seen | 2026-07-29 21:45:58 UTC |
| Profile Built | 2026-07-29 21:54:41 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 17 |
Full dossier details are available via our API.