212.30.41.23📋 Copy

# IP Intelligence Briefing: 212.30.41.23

## Executive Summary

The target IP address 212.30.41.23 presents a Low Risk profile with an overall risk score of 25/100. No active threat indicators, open services, or persistent malicious behavior were observed. The address is classified as a firewalled endpoint with no detected services.

## Network Identity & Ownership

• IP Address: 212.30.41.23/32
• ASN: 43019 (farahnet - farahnet, LB)
• Organization: Mnets-Admin
• Network Block: 212.30.41.0/24
• RIR: RIPE
• Geolocation: Marseille, France (FR)
• Registration: RIPE Registry allocation from 2008-09-16

## Threat Assessment

• Risk Score: 25 (Low Risk)
• DNSBL Listings: 1 out of 8 total lists (listed on one blacklist)
• Max Listing Severity: High
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Correlation: None detected

## Network Behavior

• Service Status: Firewalled / No Services Detected
• Open Ports: None
• TLS Certificate: None
• HTTP Services: None
• DNS Resolution: Forward resolution failed; PTR records not resolved
• Control Plane: Route changes observed in last 30 days (1 change); route stability: unstable

## Geographic & Routing Context

• Routing Path: 7018 → 3356 → 42020 → 43019 (Transit: Comcast)
• Hop Count: 30 hops
• First Hop RTT: 0.2ms
• Last Hop RTT: 151.3ms
• Geolocation Confidence: Multiple sources (2), but geo-consensus false

## Neighborhood Analysis

• Subnet Classification: 212.30.41.0/24 - Clean
• Abuse Density: 0.00
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor IP: 212.30.41.83 (Risk Score: 25, Authority Score: 50)

## Observations History

Sixteen observation signals recorded. Recent observations indicate:

• Ownership stable with no changes
• Subnet abuse density classified as clean
• DNSSEC validation enabled on the zone
• ASN information consistent across probes

## Relationships

Three relationship records identified, all referencing the "user-pool" network network.

## Recommended Actions

No specific firewall or blocking recommendations generated. The IP's low risk score and absence of active threat indicators suggest continued monitoring without immediate blocking action.

## Intelligence Assessment

The IP address 212.30.41.23 is associated with the farahnet organization and operates within a clean subnet. The single DNSBL listing requires context from the specific blacklist to determine relevance. The absence of open services and active threat indicators supports a classification of low-risk infrastructure. Recommend inclusion in standard monitoring but no immediate blocking action warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.