85.133.193.72📋 Copy

IP Intelligence Briefing: 85.133.193.72

*Generated via IPDebrief Threat Intelligence Platform*

---

1. IP Profile

• Ownership: Registered to Masoud Mohammadi under "ManaServer" (AS211056, RIPE).
• Geolocation: US-NY, New York (geoplaced via 2 sources, no consensus).
• Network Role: Firewalled infrastructure with no open ports or services detected.
• Threat Indicators: No malicious activity detected; no known attackers, spam sources, or Tor exits.
• DNS: Resolves to `static.72.193.133.85.manaserver.net` with SPF/DKIM email authentication.

---

2. Observation History

• Recent Signals:

- 19 total observations (last 30 days) with 8 DNS/abuse-related signals.

- Subnet abuse density: 1/10 (mostly clean).

- No persistent malicious activity or threat persistence.

• Notable: One DNSBL listing (1/8 total lists), but no active threats.

---

3. Network Relationships

• DNS Associations:

- Linked to `manaserver.net` (193.193.133.72).

- No correlated IPs or certificate matches.

• Network Context:

- Same subnet (`85.133.193.0/24`) with 1 threat sibling (low risk).

- No CDN, cloud, or mobile carrier associations.

---

4. Neighborhood Analysis

• Subnet: `85.133.193.0/24` (abuse density: 1/10).
• Neighbors: No active IPs detected; 0 threat siblings.
• Stability: Route stability score: 0.26 (basic operator risk).

---

SOC Actionable Insights

• Monitor: DNS resolution patterns for `manaserver.net` and subnet changes.
• Verify: Confirm ownership legitimacy via RIPE/ABUSE contact.
• Block: Consider firewall rules for subnet (`85.133.193.0/24`) if high-risk activities emerge.
• Investigate: Cross-check with threat feeds for any missed indicators.

*No immediate action required, but continuous monitoring is advised.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.