IP Intelligence Briefing: 93.158.213.25
*Generated via IPDebrief Analysis*
---
**1. Core Profile**
- Risk Rating: Moderate (55/100)
- Ownership: ASN 50673 (serverius-mnt, RIPE)
- Geolocation: Netherlands (NL), latitude 52.13, longitude 5.29
- Network Role: Single-service host (SSH on port 22)
- Threat Indicators: No malicious activity detected; no known campaigns or blacklists.
---
**2. Observation History**
- Stability: BGP routes are stable (no recent changes).
- Geolocation Validity: Plausible (116.9 km from probe, 93.6 ms average RTT).
- Ownership Consistency: No recent ownership changes.
- Threat Trends: No persistent malicious behavior observed.
---
**3. Network Relationships**
- Shared Network: Linked to SERVERIUSCUSTOMER (ASN 50673) via multiple relationships.
- Subnet: Part of 93.158.213.0/24, classified as "mostly_clean" with low abuse density.
- Neighbors:
- 93.158.213.26: Risk score 25 (low risk, potential monitoring candidate).
---
**4. Security Actions**
- Firewall Rules: No immediate action required due to low risk.
- SSH Security: Ensure SSH configurations are hardened (e.g., disable root login, restrict keys).
- Monitoring: Track neighbor IP (93.158.213.26) for anomalies.
---
**5. Summary**
The IP is a legitimate SSH host in the Netherlands, owned by serverius-mnt. While no direct threats are detected, the subnet has low abuse density, and one neighbor shows a slightly higher risk score. SOC teams should monitor the subnet for unexpected changes and ensure SSH access controls are robust. No urgent mitigation required.
*Data sourced from IPDebrief's real-time intelligence and historical observations.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | serverius-mnt |
| ASN | AS50673 |
| Network Name | SERVERIUSCUSTOMER |
| CIDR Block | 93.158.213.0/24 |
| RIR | RIPE |
| Country | NL |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.15 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 30% | 3 | 4 |
| services | 15% | 2 | 2 |
| ownership | 30% | 3 | 4 |
| reputation | 22% | 1 | 3 |
| geolocation | 33% | 2 | 4 |
| Overall | 26% | 13 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-12 09:42:00 UTC |
| Last Seen | 2026-06-26 17:36:14 UTC |
| Profile Built | 2026-06-26 17:44:54 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 25 |
Full dossier details are available via our API.