213.176.26.19📋 Copy

# IP Intelligence Briefing: 213.176.26.19

Classification: Moderate Risk (50/100)

Date: Current Intelligence Cycle

Assigned: IP Intelligence Division

Status: Under Observation

---

## EXECUTIVE SUMMARY

IP 213.176.26.19 presents a moderate risk profile (score: 50) with no active threat indicators. The address is associated with organization MM500-NET (ASN 209425) within the 213.176.24.0/22 block. No services are exposed, no blacklist entries detected, and no persistent malicious activity observed. The subnet demonstrates mixed risk characteristics with 24 medium-risk and 11 low-risk neighbors out of 36 total siblings.

---

## OWNERSHIP & NETWORK ATTRIBUTES

Organization: IROST-MNT

Netname: MM500-NET

ASN: 209425 (RIPE NCC)

CIDR Block: 213.176.24.0/22

BGP Prefix: 213.176.26.0/24

Routing Status: Route stability flagged as false; 0 route changes observed in 30-day window. Origin ASN 209425 confirmed.

Geolocation:

• Country: Netherlands (NL)
• Region: Tehran
• City: Nasimshahr (Shahrak-e-Shahab Sang)
• Coordinates: 52.13°N, 5.29°E
• Accuracy Radius: 150 km
• Geo Consensus: Validated (1 source)
• Geo Plausibility: Flagged as implausible

Contact: Abuse contact available via RDAP

---

## NETWORK ROLE & EXPOSURE

Infrastructure Classification: Firewalled / No Services

Service Status: No open ports detected

DNS Status: No forward resolution; PTR records empty

Email Reputation: No SPF or DMARC records configured

Cloud/Proxy/VPN Assessment:

• Not cloud-based
• Not a CDN
• Not a VPN
• Not a proxy
• Not Tor-related
• Not hosting infrastructure
• Not residential or mobile

---

## THREAT INDICATORS

Current Threat Status: Clean

• Is Known Attacker: No
• Is Spam Source: No
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: None populated

DNSBL Status: Listed on 2 of 8 available DNSBLs (specific feeds not enumerated)

Abuse Confidence Score: Not applicable (no active abuse indicators)

Control Plane Metrics:

• Operator Score: 0.1304
• Operator Label: Minimal
• IRR Consistency: Not available
• RPKI State: Not available

---

## SUBNET ANALYSIS (213.176.26.0/24)

Total Siblings: 36

Active Siblings: 27

Threat Siblings: 3

Abuse Density: 0.0833 (low-moderate)

Inherited Risk: 3

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 24 (68.6%)
• Low Risk: 11 (31.4%)

Notable High-Risk Neighbors:

• 213.176.26.44 (Risk: 65)
• Multiple IPs with Risk Score: 50 (213.176.26.21, 26.22, 26.23, 26.29, 26.34, 26.37, 26.41, 26.42, 26.44, 26.51, 26.52, 26.54, 26.58, 26.62, 26.63, 26.69, 26.72, 26.77, 26.82, 26.87, 26.88, 26.94, 26.95, 26.109, 26.122, 26.123, 26.133, 26.153, 26.165, 26.166, 26.175, 26.182, 26.186, 26.191, 26.194, 26.195)

---

## OBSERVATION HISTORY (16 Signals)

Recent Classification: mostly_clean

**

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.