185.15.171.200📋 Copy

IP Intelligence Briefing: 185.15.171.200/32

*Generated for SOC Analysts*

---

**Key Risk Indicators**

• Overall Risk Score: Moderate (55/100)
• Threat Status: No direct malicious indicators (no malware, phishing, or spam associations).
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP activity).
• Geolocation: Italy (Basilicata region), Tito.

---

**Ownership & Infrastructure**

• ASN: 57558 (DONATO CONTE)
• Subnet: 185.15.171.200/24
• Subnet Abuse Density: 27.6% (mixed risk: 24 high-risk, 56 medium-risk, 7 low-risk neighbors).
• Network Classification: Mixed (24 high-risk neighbors, 56 medium-risk neighbors).

---

**Threat Observations**

• Historical Signals:

- No persistent malicious activity detected.

- Recent observations (2026-06-07) show basic risk scoring, DNS validation, and route stability checks.

• DNS Associations:

- Linked to `host200-171-015-185.retemetis.net` (PTR record).

- No email authentication (SPF/DKIM/DMArC) detected.

---

**Subnet Context**

• Neighboring IPs:

- 87 total IPs in 185.15.171.0/24.

- 24 high-risk neighbors (e.g., 185.15.171.4: 80 risk score).

- 56 medium-risk neighbors.

- 7 low-risk neighbors.

• Subnet Risk: Moderate. Consider monitoring for lateral movement or network segmentation issues.

---

**Recommendations**

1. Monitor Subnet: High-risk neighbors (e.g., 185.15.171.4) may indicate compromised infrastructure.

2. Validate DNS: Investigate `retemetis.net` for potential misconfigurations or malicious activity.

3. Block High-Risk Neighbors: Consider firewall rules to isolate risky IPs in the 185.15.171.0/24 subnet.

4. Check Ownership: Verify DONATO CONTE’s legitimacy and ensure no unauthorized use of the ASN.

---

Note: No immediate action required for 185.15.171.200 itself, but subnet-level risks warrant closer scrutiny.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.