62.133.61.114📋 Copy

# IP Intelligence Briefing: 62.133.61.114/32

Classification: Moderate Risk (Score: 40)

Date of Analysis: Current

## Executive Summary

IP address 62.133.61.114 is classified as Moderate Risk with a score of 40. The address is geolocated to Amsterdam, Netherlands, but historical signals indicate associations with Russian infrastructure. The IP is listed on 1 of 8 DNS blacklists, with recent observations showing high-severity threat indicators. No active services or open ports were detected during scanning.

## Ownership and Network Context

• ASN: 215540 (Evgenii M.)
• Control Plane: Origin ASN 215540, BGP prefix 62.133.61.0/24
• Geolocation: Amsterdam, North Holland, Netherlands (52.13°N, 5.29°E)
• Geographic Confidence: 28% confidence per multi-signal inference
• PTR Hostname: 130877.ip-ptr.tech

## Threat Indicators

• Abuse Confidence: Listed on 1 DNS blacklist out of 8 total lists
• Known Threats: Historical signals from 2026-06-26 show threat indicators with high severity
• Russian Infrastructure: Alienvault OTX data (AS48430: perviy tsod llc) shows association with Russia (55.74°N, 37.61°E) with 6 pulse/threat events
• Network Classification: Service purpose marked as "Firewalled / No Services"
• Network Role: Not identified as CDN, Cloud, VPN, Proxy, Tor, or Hosting infrastructure

## Temporal Analysis

• Observation Count: 21 historical signals
• Recent Activity: Threat indicators observed on 2026-06-26 with high severity listings
• Persistence: No persistent malicious behavior confirmed (0 threat persistence days)
• Ownership Stability: No ownership changes recorded

## Neighborhood Analysis

• Subnet: 62.133.61.114/24
• Abuse Density: 0 (mostly_clean classification)
• Threat Siblings: 1 threat sibling identified in subnet
• Active Siblings: 0

## Related Entities

• DNS Associations: Multiple PTR hostname associations (130877.ip-ptr.tech, 195173.ip-ptr.tech)
• Network Relationships: Multiple same-network associations to GIR_SER-NET

## Recommended Actions

Based on the moderate risk profile and blacklist presence, the following firewall rules are recommended:

## Analyst Notes

The IP exhibits geographic inconsistencies (Netherlands geolocation vs. Russian threat signals). The subnet shows minimal abuse density, but the specific IP has been flagged with high-severity threats in recent observations. The lack of open services suggests either a properly secured system or a dormant address. Correlate with additional threat intelligence feeds before implementing blocking measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.