213.92.222.237📋 Copy

IP Intelligence Briefing: 213.92.222.237

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Assessment: Moderate Risk (Risk Score: 55/100). No direct malicious indicators (no malware, phishing, or C2 activity).
• Ownership: Owned by Arkadiusz Suchy (ASN: 29314, RIPE registry). Abuse contact available via RDAP.
• Geolocation: Poland (PL), Gniezno, Region 30. Coordinates: 51.92°N, 19.15°E.
• Network Role: Firewalled host with no open services or TLS certificates.
• DNS: Resolves to `213-92-222-237.serv-net.pl` (SPF record present, no DMARC).

---

**2. Threat Observations**

• No Active Threats: No indicators of spam, malware, or known attacker activity.
• Subnet Risk: Subnet 213.92.222.0/24 has an abuse density of 42.86%, with 3 threat-sibling IPs.
• Neighbor Analysis:

- 6 total neighbors, with 1 high-risk neighbor (80/100).

- Most neighbors share similar risk scores (55/100), but one shows elevated risk.

---

**3. Historical Trends**

• Observation History: 18 data points over 30 days.
• Risk Stability: Risk score has remained stable at 55, with no spikes in threat signals.
• Geolocation Consistency: Plausible Polish location with consistent DNS resolution.

---

**4. Relationships & Context**

• DNS Associations: Linked to serv-net.pl (PTR record). No email authentication (DMARC/SPF mismatch).
• Network Peers: Same subnet as PL-SERVNET4 (RIPE network).
• No Campaign Links: No correlation to known APTs, malware families, or phishing campaigns.

---

**5. Recommendations**

• Monitor Subnet: Track the high-risk neighbor (213.92.222.76) for unusual activity.
• Verify DNS: Confirm ownership of `serv-net.pl` and ensure DNSSEC validation.
• Baseline Behavior: No immediate action required, but maintain monitoring for unexpected service changes or subnet-level threats.

---

*End of Briefing*

*Generated by IPDebrief | © 2026 Jason Alberino*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.