85.203.23.67📋 Copy

IP Intelligence Briefing: 85.203.23.67/32

*Generated via IPDebrief Threat Intelligence Platform*

---

**1. Core Profile**

• Risk Rating: Moderate (Risk Score: 50/100)
• Ownership: Owned by VPN Consumer Singapore (AS137409)
• Geolocation:

- Primary: Singapore (SG), Bukit Merah Estate (latitude 1.35, longitude 103.82)

- Secondary: Conflicting data suggests Dallas, TX (US), but geoplausibility is flagged as false

• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP signatures)
• Threat Indicators: No malicious activity detected (no blacklists, campaigns, or honeypot hits)

---

**2. Temporal Observations**

• Latest Activity: June 6, 2026 (multi-signal inferred geolocation, 45km accuracy)
• Historical Trends:

- Conflicting geolocation data (Singapore vs. Dallas, TX) observed on May 29, 2026

- No persistent malicious behavior (threat persistence days: 0)

- Stability score: 0 (no recent network changes)

---

**3. Network Relationships**

• Subnet: 85.203.23.0/24 (abuse density: 18.47%)
• Key Links:

- Same network: SINGAPORE-SG-85-203-23-0

- 29 threat siblings in subnet (medium/low risk)

- 30 active neighbors (157 total siblings)

---

**4. Neighborhood Analysis**

• Subnet Risk: Mostly clean (abuse density: 0.18), but 29 neighbors flagged as threat siblings
• High-Risk Neighbors:

- 22 IPs with medium risk (score: 25–40)

- 78 IPs with low risk (score: 0–25)

• Notable: No direct IP-level abuse detected, but subnet-wide risk suggests monitoring

---

**5. Technical & Security Context**

• DNS: No PTR records, no email auth (SPF/DKIM/DMArC absent)
• BGP: Valid DNSSEC, CAA records; 2 DNSBL listings (low impact)
• Routing: Stable BGP prefix (AS137409), no route changes in 30 days
• Services: No open ports, no TLS certs, no HTTP server banners

---

**6. SOC Actionable Insights**

• Monitor: Subnet 85.203.23.0/24 for lateral movement or C2 activity
• Verify: Investigate conflicting geolocation data (Singapore vs. Dallas, TX)
• Block: Consider firewall rules for subnet if threat siblings escalate
• Context: No direct malicious indicators, but subnet risk warrants cautious scrutiny

---

*Generated from IPDebrief intelligence tools (profile, history, relationships, neighbors). Data as of June 6, 2026.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.