72.56.36.209📋 Copy

IP Intelligence Briefing: 72.56.36.209

*Generated via IPDebrief Tools*

---

1. Risk Profile

• Overall Risk: Low (Risk Score: 25)
• Provider Score: 0 (No malicious provider activity detected)
• Authority Score: 0 (No authoritative malicious activity)
• Stability: Unstable (Route stability score: 0.13)

2. Ownership & Geolocation

• Registrar: JSC "TIMEWEB" (ASN 9123, ARIN)
• Geolocation:

- Country: United States (US)

- Region: Saint-Petersburg (conflict with "RUSSIAN FEDERATION" in city field)

- Coordinates: Latitude 37.75, Longitude -97.82

3. Threat Indicators

• Malicious Activity: None detected (no indicators, blacklists, or campaigns)
• DNS/Email: No SPF, DMARC, or CAA records found
• Network Role: Firewalled / No Services (no open ports or TLS certificates)

4. Historical Observations (30 Days)

• Geolocation Consensus: 1 source (low confidence)
• Ownership Stability: No changes
• Threat Persistence: No malicious observations

5. Network Relationships

• Subnet: 72.56.36.0/24 (TW-Cloud)
• Neighbors:

- 72.56.36.170: Risk Score 50 (medium risk)

- Subnet Abuse Density: 0%

6. Anomalies & Flags

• Geolocation Discrepancy: Conflicting city data ("RUSSIAN FEDERATION" vs. US)
• Neighbor Risk: One neighbor (72.56.36.170) shows medium risk
• Routing Stability: Unstable BGP routes (route changes detected)

---

Recommendations

• Monitor neighbor 72.56.36.170 for potential lateral movement.
• Investigate geolocation inconsistency to verify true location.
• Maintain current firewall rules; no immediate mitigation required.

*Data sourced from IPDebrief intelligence feeds. Use with operational discretion.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.