212.225.236.84📋 Copy

IP Intelligence Briefing: 212.225.236.84

*Generated for SOC Analyst*

---

**1. Core Profile**

• Risk Assessment:

- Overall Risk Score: 25 (Low Risk)

- Provider Score: 0 (No ISP association detected)

- Authority Score: 0 (No authoritative control signals)

- Stability: Unstable (route instability flagged in BGP data).

- Threat Indicators: No malicious activity, spam, or known attacker associations.

• Ownership:

- ASN: 34977 (PROCONO-AS)

- Organization: Jose Carrillo (Spain)

- Geolocation: Málaga, Andalusia, Spain (36.72°N, -4.42°E).

- Network: PENARROYA-NET (RIPE registry).

• Network Role:

- No open ports, services, or TLS certificates detected.

- Classified as "Firewalled / No Services" with no CDN, VPN, or mobile carrier signals.

---

**2. Observation History (Last 30 Days)**

• Activity Trends:

- 18 observations recorded (last update: June 7, 2026).

- Risk score consistently low (25–30), with no spikes in threat indicators.

- BGP route stability issues noted (route changes flagged).

• Key Signals:

- DNS resolution to `84.red.236.225.212.procono.es` (no email auth configured).

- Minimal DNSSEC and CAA validation risks.

---

**3. Relationships & Dependencies**

• Network Connections:

- Linked to PENARROYA-NET (same network as ASN 34977).

- DNS associations with `84.red.236.225.212.procono.es` (repeatedly resolved).

• Threat Context:

- No direct ties to known campaigns, honeypots, or malicious domains.

- No WAF violations or enumeration strikes detected.

---

**4. Neighborhood Analysis**

• Subnet: 212.225.236.0/24
• Neighbor Risk:

- 1 sibling IP identified: 212.225.236.134 (Risk Score: 70).

- Subnet abuse density: 0 (low risk).

- Note: The high-risk neighbor (70) warrants closer scrutiny for potential compromise or lateral movement.

---

**5. Recommendations**

• Monitor Neighbors: Investigate 212.225.236.134 for suspicious activity (e.g., C2 communication, port scanning).
• Verify DNS Configuration: Ensure `84.red.236.225.212.procono.es` is legitimate and not used for phishing.
• Check Route Stability: Validate BGP route stability for 212.225.236.84 to prevent downtime.
• No Blocking Required: Low-risk IP with no active threats; no firewall rules recommended.

---

*Data sourced from IPDebrief intelligence. Risk scores and classifications based on historical and real-time signals.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.