80.94.92.164📋 Copy

Threat Intelligence Briefing for IP 80.94.92.164/32

*Generated via IPDebrief Analysis*

---

**1. IP Profile**

• Risk Score: 65 (Moderate Risk)
• Ownership: ASN 47890 (ABUSE DEP, RIPE)
• Geolocation: Netherlands (NL), Latitude 52.13, Longitude 5.29
• Network Role: Firewalled / No Services (no open ports, TLS, or HTTP services detected)
• Threat Indicators: No known malicious activity, no DNSBL listings, no spam or attack campaigns linked.

---

**2. Observation History**

• Latest Activity: June 2026
• Risk Trends:

- Minimal risk score (0.13) over 30 days.

- DNSSEC validity confirmed, but 3 DNSBL listings (low-severity).

- No persistent malicious behavior or threat persistence.

---

**3. Relationships**

• Linked Entities:

- Repeated associations with "DMZHOST" (likely a network segment or hostname).

- No direct links to organizations, certificates, or subdomains.

---

**4. Subnet Analysis**

• Subnet: 80.94.92.0/24
• Abuse Density: 33.3% (moderate risk)
• High-Risk Neighbors:

- 10 IPs with ≥80 risk scores (e.g., 80.94.92.102, 80.94.92.182).

- 7 IPs with ≥65 risk scores (potential elevated risk).

• Low-Risk Neighbors: 12 IPs with ≤25 risk scores.

---

**5. Actionable Insights**

• SOC Analyst Recommendations:

- Monitor the 80.94.92.0/24 subnet for lateral movement or command-and-control activity, given the presence of high-risk neighbors.

- Verify if "DMZHOST" is a legitimate internal asset or a compromised host.

- Ensure firewall rules block traffic from high-risk neighbors (e.g., 80.94.92.102, 80.94.92.182) unless explicitly allowed.

- Validate DNSSEC and DNSBL status for the subnet to mitigate spoofing risks.

---

*End of Briefing*

*Generated by IPDebrief – Cybersecurity Threat Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.