130.185.96.113📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 130.185.96.113/32

Classification: High Risk

Date: 2026-06-22

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP 130.185.96.113 presents an elevated threat profile with a risk score of 80/100. The address is associated with Pelephone Communications Ltd. (ASN 16116) and appears in multiple threat feeds with DNSBL listings across 5 of 8 queried blacklists. The IP shows geolocation inconsistencies (reported in both Israel and Poland), and the /24 neighborhood exhibits moderate abuse density (0.5) with two neighboring IPs flagged as high-risk (130.185.96.126) and medium-risk (130.185.96.125).

---

## NETWORK PROFILE

---

## THREAT INDICATORS

• DNSBL Presence: IP listed on multiple blacklists including Alienvault OTX
• Operator Score: 0.1304 (Minimal)
• Threat Persistence: 0 days observed
• Campaign Correlation: 0 correlated IPs identified
• Tor Exit: No
• Known Attacker: No
• Spam Source: No

---

## OBSERVATION HISTORY

Signal monitoring identified 17 historical observations. Key findings:

• 2026-06-22: Recent operator classification updated to "Minimal"
• 2026-06-17: Listed on 8 blacklists with 5 high-severity entries
• Geolocation Discrepancy: Alienvault OTX signal indicates Poland (52.2394, 21.0362) vs. primary geolocation of Israel
• Subnet Abuse Density: 0.3333 classification

---

## NETWORK NEIGHBORHOOD ANALYSIS

Subnet: 130.185.96.113/24

• Total Siblings: 3
• Active Siblings: 1
• Threat Siblings: 1
• Abuse Density: 0.5 (Moderate-High)
• Inherited Risk: 2

High-Risk Neighbors:

---

## RELATIONSHIP MAPPING

17 relationship records identified, all mapped to same network designation "IL-PELEPHONE-20111024". No external entity correlations (organizations, hostnames, certificates) detected beyond network-level associations.

---

## RECOMMENDED ACTIONS

Priority: Critical

Risk Score: 80/100

Monitoring Recommendation: Increase logging verbosity and review all recent activity from this IP address due to elevated risk classification.

---

## ANALYST NOTES

1. The IP shows no active service ports but maintains DNS records pointing to a maverick.com.pl infrastructure

2. Geolocation validation flagged as inconsistent (IL vs PL reports)

3. Neighborhood risk suggests potential shared infrastructure abuse patterns

4. Route instability (false) may indicate routing anomalies or peering issues

---

*This briefing is based on IPDebrief intelligence data. Recommendations should be validated against internal threat intelligence before deployment.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.