213.204.118.85📋 Copy

## IP Intelligence Briefing: 213.204.118.85/32

Classification: Low Risk / Passive Infrastructure

Date of Analysis: Current

Risk Score: 15 / 100

Summary

IP 213.204.118.85 is a low-risk address belonging to LB-TERRANET (ASN 39010). The address shows no active services, no known malicious indicators, and is firewalled with no open ports. Historical data indicates inconsistent geolocation reporting between US and Lebanon.

Ownership and Network

• Organization: LB-TERRANET
• ASN: 39010 (TERRANET-AS)
• CIDR Block: 213.204.118.0/24
• RIR: RIPE
• Registration Date: 2008-05-14

Geolocation Analysis

Current Profile: US, New York, US-NY

Historical Data: Beirut, Lebanon (LB)

Status: Geographic consensus unresolved. Domain suffix (.lb) and organization naming (LB-TERRANET) indicate Lebanon origin. Geolocation discrepancy noted between current profile and historical observations.

Threat Assessment

• Blacklist Status: Listed on 1 of 8 threat intelligence feeds (medium severity)
• Known Threats: None identified
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Network Role and Services

• Service State: Firewalled / No Services
• Open Ports: None detected
• Active Services: None
• TLS Certificates: None
• CDN/Cloud/Proxy: No

DNS Configuration

• PTR Hostname: wigo-213-204-118-85.terra.net.lb
• Forward Resolution: Unconfirmed
• Domain: net.lb
• DNSSEC: Valid
• Email Authentication: No SPF/DMARC records

Neighborhood Analysis

• Subnet Abuse Density: 0
• Threat Siblings: 0
• Notable Neighbor: 213.204.118.175 (Risk Score: 0)
• Subnet Classification: Clean / No Abuse

Historical Observations

Total observations: 14

• Recent blacklist activity observed (medium severity)
• ASN and ownership data consistent over time
• No persistent malicious behavior detected

Control Plane Data

• Route Stability: False (0 route changes in 30 days)
• DNSSEC: Valid
• BGP Prefix: 213.204.118.0/24
• Origin ASN: 39010

Recommended Actions

No specific firewall rules or blocking recommendations generated. The IP presents minimal threat risk and no active malicious services. Standard monitoring practices recommended.

---

Intel Note: The geolocation discrepancy (US vs. Lebanon) warrants monitoring but does not indicate active threat activity. The IP's firewalled status and zero abuse density in the /24 subnet support continued pass monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.