IP 212.4.152.140/32 maintained a Moderate Risk reputation profile with a risk score of 40. Ownership records linked the address to ASN 12570 (MNET-IP-MNT) under the SELFNET-CZ netname within the Ripe registry. Geolocation analysis placed the node in Velké Pavlovice, South Moravian, Czech Republic, though geo sources disagreed on the country code between GB and CZ.
Network role assessment classified the address as Firewalled with No Services, and no open ports were detected. The DNS PTR hostname resolved to gw1.eu.hosting.international, and the domain hosted valid SPF and DMARC records. Control plane data indicated the route was not stable, and the IP was listed on two of eight DNSBL lists.
Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations, and the address was not flagged as a known attacker or spam source. Despite a low overall data confidence score of 0.2142, the threat actor classification labeled the host as Suspicious. A Medium severity recommendation was issued to rate-limit traffic.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | MNET-IP-MNT |
| ASN | AS12570 |
| Network Name | SELFNET-CZ |
| CIDR Block | 212.4.152.112/28 |
| RIR | RIPE |
| Country | CZ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | gw1.eu.hosting.international |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | gw1.eu.hosting.international |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 37% | 2 | 6 |
| Overall | 26% | 10 | 21 |
| Data Coherence | Mostly Consistent (80%) โ 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-29 13:58:07 UTC |
| Last Seen | 2026-09-25 04:54:39 UTC |
| Profile Built | 2026-09-25 05:10:52 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 39 |
Full dossier details are available via our API.