195.154.170.135📋 Copy

IP Intelligence Briefing: 195.154.170.135

*Last Updated: 2026-06-08*

---

**1. Core Profile**

• Risk Score: Moderate (59/100)
• Ownership: Owned by Scaleway (AS12876), based in France (Paris).
• Geolocation: Paris, France (FR).
• Network Role: Tor exit node, classified as a Web Server with HTTP/HTTPS services.
• Threat Indicators:

- Tor exit node (confirmed).

- DNS associations with `notorture.deuza.bzh` (mixed reputation).

- Moderate operator risk score (0.52).

---

**2. Threat Observations**

• Tor Exit Node: This IP is actively used as a Tor exit node, which may be associated with anonymity services or malicious traffic.
• DNS Activity:

- PTR hostname: `notorture.deuza.bzh` (linked to mixed reputation).

- DNSSEC and CAA records present but not fully validated.

• Services:

- Open ports: 80 (HTTP), 443 (HTTPS).

- TLS certificate issued by Let’s Encrypt, valid for `notorture.deuza.bzh`.

- Server banner: Apache.

---

**3. Temporal Trends**

• Observation History:

- Recent signals (June 7–8, 2026) show consistent moderate risk.

- No significant changes in threat indicators or network behavior.

• Stability:

- BGP route stability: Stable (no recent route changes).

- Geolocation consistency: Paris, France (500m radius).

---

**4. Network Relationships**

• Linked Entities:

- DNS: `notorture.deuza.bzh` (mixed reputation).

- Network: Scaleway (AS12876).

- Subnet: 195.154.170.0/24 (no neighboring IPs reported).

• Risk Correlation:

- No direct links to known malicious campaigns or blacklists.

---

**5. Recommendations**

• Monitoring:

- Track traffic originating from this Tor exit node, as it may be used for covert communication or data exfiltration.

- Monitor DNS queries to `notorture.deuza.bzh` for suspicious activity.

• Firewall Rules:

- Consider blocking Tor exit nodes in your network unless explicitly required.

- Apply rules to restrict HTTP/HTTPS traffic from this IP unless authorized.

• Investigation:

- Validate the legitimacy of `notorture.deuza.bzh` and its associated services.

---

Next Steps:

• Cross-reference `notorture.deuza.bzh` with threat intelligence feeds.
• Review historical data for anomalies in Tor exit node behavior.

*Generated by IPDebrief intelligence analysis.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.