201.3.225.26📋 Copy

# IP Intelligence Briefing: 201.3.225.26

## Executive Summary

IP address 201.3.225.26 presents as a low-risk endpoint with minimal threat indicators. The system demonstrated no malicious activity, blacklist listings, or active campaign associations during observation. However, the subnet shows inherited risk from neighboring addresses and warrants continued monitoring.

## Network Profile

The IP is registered under ASN 48031, organization IPBNB Abuse Contact (IPbnb-LLC), within LACNIC region. The network block 201.3.225.0/24 is attributed to IPbnb-LLC. Geolocation data indicates Poland (PL) with coordinates 51.92, 19.15, though this shows some variance. The IP resolved via PTR to vm23370.bit.hosting within the bit.hosting domain.

## Risk Assessment

Current risk score: 0 (Low Risk). No threat indicators detected:

• Abuse confidence score: null
• Known attacker: false
• Spam source: false
• Blacklist count: 0
• Tor exit node: false

DNSSEC validation confirmed valid. Operator score: 0.1304 (Minimal). Route stability flag: false.

## Services & Fingerprint

Open ports: TCP/443 (HTTPS), TCP/22 (SSH). SSH banner identified as "SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.5". TLS certificate issued to CN=www.nzw2gcmstpduxkkab4q.net by CN=www.rrv2kzb6.com. Email authentication includes SPF and DMARC records.

## Neighborhood Analysis

Subnet 201.3.225.0/24 contains 10 total siblings with abuse density of 0.1. Classification: mostly_clean. Risk distribution across subnet: 0 high-risk, 1 medium-risk, 8 low-risk addresses. Notable neighbor 201.3.225.20 demonstrates elevated risk score of 70 with authority score of 50, indicating potential abuse activity within the same /24 block.

## Historical Observations

Twenty observation signals recorded. Most recent activity timestamped 2026-07-29T01:22:12. Connection failures observed during earlier scans. No threat persistence days recorded. No known campaigns correlated.

## Relationships

DNS associations point to hostname vm23370.bit.hosting. Multiple network-level relationships link to IPbnb-LLC organization. No additional external entity relationships detected.

## Recommended Actions

No specific firewall rules or blocking actions recommended at this time. The IP maintains low-risk classification with no actionable threat indicators. However, continued monitoring advised due to:

• Elevated risk neighbor (201.3.225.20) within same /24 block
• Route stability flag: false
• Inherited risk score: 2 from subnet context

## Conclusion

IP 201.3.225.26 represents a standard web server endpoint with no current malicious activity. Standard defensive monitoring procedures apply. Investigation priority: low.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.