195.62.32.212📋 Copy

# IP Intelligence Briefing: 195.62.32.212/32

Classification: Moderate Risk

Risk Score: 55/100

Reporting Date: 2026-06-25

---

## Executive Summary

IP address 195.62.32.212 is a German-originated IP (DE) under ASN 198584, associated with Marcel Edler. The address presents moderate risk (55/100) with no active services detected and minimal operator involvement. One threat sibling exists within the /24 subnet, suggesting potential related activity.

---

## Technical Profile

Ownership & Registration:

• ASN: 198584
• Organization: Marcel Edler
• RIR: RIPE
• Registration: Available via RDAP

Geolocation:

• Country: DE (Germany)
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin
• Geo Consensus: Validated across multiple sources

Network Classification:

• Network Role: Firewalled / No Services
• Is Cloud/CDN/VPN/Proxy: No
• Is Hosting/Residential/Mobile: No

---

## Threat Indicators

Abuse Status:

• Abuse Confidence Score: Not calculated
• Known Campaigns: None
• Threat Feeds: None detected
• Blacklist Count: 0

DNSBL Status:

• Listed on 3 of 8 DNSBL lists
• Operator Score: 0.1304 (Minimal)

Network Stability:

• Route Stability: Unstable
• BGP Route Changes (30d): 0
• RPKI State: Not evaluated

---

## Observations & History

Total Observations: 17 signals

Recent Activity:

• 2026-06-25: Multi-dimensional signal analysis with 6 covered dimensions
• 2026-06-04: Geolocation validation and subnet classification
• Consistent DE geolocation across observation period

Subnet Context (195.62.32.0/24):

• Abuse Density: 0.5
• Classification: Mostly Clean
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 1

---

## Related Infrastructure

Network Relationships:

• 16 same-network relationships identified
• All associated with PIO-Hosting network segment
• Network Type: Same Network (repeated classification)

Neighbor Analysis:

• Subnet: 195.62.32.212/24
• Neighbor Count: 1
• Neighbor IP: 195.62.32.180 (Risk Score: 55)
• Risk Distribution: 1 medium, 0 high, 0 low

---

## Recommended Actions

Priority: High (Elevated Risk Score)

Monitoring:

• Increase logging verbosity for this IP
• Review recent activity patterns

Blocking Rules (Deploy as appropriate):

---

## Assessment

The IP address demonstrates moderate risk characteristics with elevated risk score (55/100) but lacks active threat indicators such as known campaigns, blacklist presence, or Tor exit node activity. The subnet shows one threat sibling, warranting correlation of activity from 195.62.32.180. No services are currently open, suggesting the address may be dormant or strictly firewalled.

Recommendation: Monitor for activity escalation and deploy blocking rules if this IP begins generating traffic toward your infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.