85.203.36.13📋 Copy

# IP Intelligence Briefing: 85.203.36.13/32

## Executive Summary

IP 85.203.36.13 presents a low-risk threat profile with a reputation score of 25. The address is associated with Clouvider Limited (ASN 62240) and shows minimal malicious activity indicators. The IP is currently firewalled with no active services detected.

## Risk Assessment

Current Risk Score: 25 (Low Risk)

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Is Persistently Malicious: No

Threat Indicators:

• Is Tor Exit Node: No
• Is Known Attacker: No
• Is Spam Source: No
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists (max severity: high)

## Infrastructure Profile

Network Registration:

• ASN: 62240 (Clouvider Limited)
• Org Name: VPN-CN-RIPE-CO-ROLE
• Netname: VPN-CN-GB
• RIR: RIPE
• CIDR Block: 85.203.36.0/24

Geolocation:

• Country: US
• City: De Hoefsmid 11 (geolocation discrepancy noted)
• Geo Source Consensus: Yes

Network Services:

• Open Ports: None
• DNS Records: None
• PTR Records: None
• Forward Resolution: Not confirmed
• Service Purpose: Firewalled / No Services

Security Posture:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Auto-Banned: No

## Historical Analysis

Observation Count: 13 signals

• Most Recent Observation: 2026-07-30
• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 1
• DNSSEC Valid: Yes

Recent Activity:

• Ownership remains stable with no changes
• Single DNSBL listing detected at latest observation
• No persistent malicious behavior observed

## Network Neighborhood Analysis

Subnet: 85.203.36.0/24

• Total Sibling IPs: 30
• Abuse Density: 0
• Inherited Risk: 0

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 30

Notable Neighbor Activity:

• All sibling IPs show risk scores of 0 or 25
• Authority scores consistently at 50 across all neighbors
• No significant threat siblings detected

## Relationships

• Network Association: VPN-CN-GB (Same Network)
• No additional relationships (hostnames, organizations, certificates) detected

## Recommended Actions

Based on the low-risk profile and minimal threat indicators:

• No immediate blocking recommended
• Standard monitoring appropriate
• No specific firewall rules required at this time

## Conclusion

IP 85.203.36.13 demonstrates characteristics consistent with benign infrastructure. The low risk score (25), absence of open services, zero active incidents, and clean neighborhood profile indicate this IP is not currently exhibiting malicious behavior. The single DNSBL listing warrants awareness but does not justify aggressive blocking actions. Continue standard monitoring without additional restrictions.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.