85.113.11.22📋 Copy

IP Intelligence Briefing: 85.113.11.22/32

Date: 2026-06-10

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Provider: KTNET-MNT (AS12997, Kyrgyzstan)
• Geolocation: Amsterdam, Netherlands (NL)
• Network: 85.113.11.0/24 (KTNET-OSH-AREA)
• Services: No open ports; firewalled infrastructure.
• Threat Indicators:

- Listed in 4 DNSBLs (8 total lists).

- No direct malware campaigns or known attacker associations.

---

**2. Observation History (Last 30 Days)**

• Activity: 17 observations, primarily DNS and reputation signals.
• Key Findings:

- DNSBL Listings: Flagged in 3/8 DNSBLs (high severity).

- Geolocation Discrepancy: IP registered in NL but resolves to .kg domains (ykc.kg).

- Stability: BGP route stability score: 0.13 (Minimal).

---

**3. Network Relationships**

• Linked Entities:

- Network: KTNET-OSH-AREA (same subnet).

- DNS: ykc.kg (PTR hostname).

• Infrastructure: No CDN, cloud, or mobile carrier associations.

---

**4. Neighborhood Analysis**

• Subnet: 85.113.11.0/24 (0 active neighbors).
• Abuse Density: 0% (no malicious siblings).
• Isolation: IP appears isolated in its subnet.

---

**5. Threat Context**

• DNS Anomalies: Resolves to a .kg domain (Kyrgyzstan) despite NL geolocation.
• Reputation: High-risk score due to DNSBL listings and inconsistent geolocation.
• Behavioral: No honeypot hits or WAF violations detected.

---

**6. Recommendations**

• Monitoring: Continuously monitor DNS resolution and BGP route stability.
• Blocking: Consider blocking DNS queries to ykc.kg if linked to malicious activity.
• Investigation: Validate .kg domain ownership and investigate geolocation discrepancies.

Product: IPDebrief | Copyright: 2026 Jason Alberino. All rights reserved.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.