85.240.62.113📋 Copy

# IP Intelligence Briefing: 85.240.62.113/32

Classification: MODERATE RISK

Assessment Date: 2026-07-23

Intel Source: IPDebrief

## Executive Summary

IP 85.240.62.113 is a mobile broadband subscriber address associated with MEO (TELEPAC-MNT) network infrastructure in the Azores region of Portugal. Risk assessment yields a moderate risk score of 40/100. No active threat indicators, known campaigns, or malicious activity detected. The IP is classified as mobile/residential with no open services.

## Technical Profile

Network Infrastructure:

• ASN: 3243 (TELEPAC-MNT / MEO-BROADBAND)
• CIDR Block: 85.240.0.0/17
• RIR: RIPE
• Mobile Carrier: MEO (MCC: 268, MNC: 06)
• Connection Technology: LTE/5G

Geolocation:

• Country: Portugal (PT)
• Region: Azores
• City: Guadalupe
• Coordinates: 39.4°N, -8.22°W
• Geolocation Accuracy: 300km radius

DNS Resolution:

• PTR Hostname: bl7-62-113.dsl.telepac.pt
• Forward Resolution: Confirmed (1 forward hostname)
• Domain: telepac.pt
• Email Authentication: SPF enabled, DMARC not configured

## Threat Analysis

Risk Indicators:

• Risk Score: 40 (Moderate Risk)
• Abuse Confidence Score: None reported
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None identified

Threat Feeds:

• No entries in Pulsedive or other threat feeds
• No certificate-based campaign correlations
• No banner-based threat matches

Network Role Classification:

• Infrastructure Type: Mobile broadband subscriber
• Service Status: Firewalled / No Services
• Not classified as CDN, VPN, proxy, hosting, or cloud infrastructure

## Neighborhood Analysis

Subnet: 85.240.62.113/24

• Abuse Density: 0 (Clean)
• Classification: Clean
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0

Neighboring IP Risk Profile:

• 85.240.62.84: Risk Score 40, Authority Score 60
• No high-risk neighbors detected

## Observation History

Signal Count: 18 observations

• Recent observations confirm clean classification
• No ownership changes detected
• No persistent malicious behavior observed
• Threat observation count: 0

Signal Types Observed:

• Subnet classification (clean)
• Geolocation inference (PT)
• Network role classification (mobile broadband)
• Ownership verification (TELEPAC-MNT)

## Relationship Graph

Identified Relationships:

• Network Association: MEO-BROADBAND
• DNS Associations: bl7-62-113.dsl.telepac.pt (multiple entries)
• No certificate or organization-level relationships

## Control Plane Status

• BGP Prefix: 85.240.0.0/13
• Route Stability: Unstable (not route stable)
• RPKI State: Not validated
• IRR Consistency: Not verified
• Operator Score: 0.3478 (Basic)
• DNSBL Listed: 2 lists out of 8 total (contextual to mobile classification)

## Recommended Actions

For SOC Analysts:

1. Monitoring Priority: LOW-MEDIUM

2. Firewall Rules: No specific blocking required

3. Threat Hunting: No immediate investigation warranted

4. Block List Addition: Not recommended (0 blacklist entries)

Contextual Notes:

• This IP represents a residential mobile broadband connection
• The moderate risk score reflects mobile carrier classification rather than malicious activity
• Neighbor 85.240.62.84 shares similar risk profile (score 40)
• No actionable threat indicators present

## Conclusion

IP 85.240.62.113 is a legitimate mobile broadband subscriber address with no detected malicious activity. The moderate risk classification stems from the mobile/residential nature of the connection rather than adversarial behavior. SOC teams may monitor passively without immediate alerting or blocking actions. No further investigation required at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.