85.11.167.19📋 Copy

IP Intelligence Briefing: 85.11.167.19

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Score: 65 (Moderate Risk)
• Ownership:

- Organization: TechTies Inc. (ASN 209630)

- Network: TechTies-Network (CIDR: 85.11.167.0/24)

- Registration: RIPE, abuse contact available via RDAP

• Geolocation:

- Country: US (reported), but network registered under NL (Netherlands).

- City: Boston (US), but traceroute suggests transit via Comcast and GTT (mixed routing).

• Threat Indicators:

- No direct malicious activity detected (no blacklists, spam, or campaigns).

- DNS Associations: Linked to `colourings.northernlettings.com` (PTR confirmed).

---

**2. Network Behavior**

• Subnet: 85.11.167.0/24
• Neighbor Risk:

- Total Siblings: 21 IPs (20 in /24 subnet).

- Abuse Density: 0.3182 (moderate).

- Threat Siblings: 7 IPs with risk scores ≥ 25 (highest: 50).

• Stability:

- BGP route stability: Unstable (route changes in 30d).

- DNSSEC valid, but CAA records absent.

---

**3. Historical Observations**

• Recent Activity (2026-06-11):

- Geolocation Plausibility: Confirmed (1651 km from claimed US location).

- Network Changes: No ownership shifts; stable ASN (209630).

- Threat Persistence: No observed malicious campaigns or persistent threats.

---

**4. Relationships & Associations**

• Linked Entities:

- Network: TechTies-Network (same /24 subnet).

- DNS: `colourings.northernlettings.com` (PTR and forward resolution confirmed).

• Email Security: SPF and DMARC records present, but no TXT records for email verification.

---

**5. Actionable Insights**

• Monitor:

- `colourings.northernlettings.com` for DNS-based threats (e.g., CNAME chains, phishing).

- Subnet Neighbors: Focus on IPs with ≥25 risk scores (e.g., 85.11.167.46, 85.11.167.142).

• Verify:

- Discrepancy between geolocation (US) and network registration (NL). Investigate routing anomalies.

• Firewall:

- Consider blocking high-risk neighbors (e.g., 85.11.167.46) if they are not critical.

---

Conclusion:

85.11.167.19 is part of a moderately risky subnet with no direct malicious activity. However, its association with `colourings.northernlettings.com` and mixed routing warrant further investigation. Prioritize monitoring subnet neighbors and DNS-linked domains for potential lateral movement or phishing campaigns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.