IPDEBRIEF INTELLIGENCE BRIEFING
Target: 212.83.178.11/32
Classification: Low Risk / Cloud Infrastructure
Date: Current
Analyst: IPDebrief Intelligence Team
---
## EXECUTIVE SUMMARY
IP 212.83.178.11 is a cloud-hosted address in Paris, France, operated by Scaleway (ASN 12876) within the 212.83.160.0/19 BGP prefix. The IP presents a low-risk profile (Score: 25) with no active threat indicators. However, the address has been observed on 8 blacklist sources with at least one high-severity listing, and recent port scanning activity was detected. No open services were observed; the host appears firewall-protected.
---
## NETWORK OWNERSHIP & GEOLOCATION
| Attribute | Value |
|---|---|
| **ASN** | 12876 |
| **Organization** | MNT-TISCALIFR |
| **ISP** | Scaleway |
| **Infrastructure Type** | CloudCompute |
| **Country** | France (FR) |
| **City** | Paris |
| **Region** | IDF |
| **RIR** | RIPE |
| **CIDR Block** | 212.83.178.11/24 |
| **BGP Prefix** | 212.83.160.0/19 |
Geolocation Confidence: Validated (500km accuracy radius). ICMP validation unavailable due to blocking.
---
## THREAT ASSESSMENT
Overall Risk Score: 25/100 (Low Risk)
Abuse Confidence Score: Not available
Blacklist Status: Listed on 8 DNSBL sources (1 high-severity listing)
Known Campaigns: None
Tor Exit Node: No
Known Attacker: No
Spam Source: No
Threat Indicators:
- No active threat campaigns correlated
- No known attacker reputation
- No spam source designation
- No Tor exit node status
Control Plane Data:
- Route stability: Unstable
- DNSSEC Valid: Yes
- DNSBL Listed: 1 (of 8 total)
- Operator Score: 0.2609 (Basic)
- RPKI State: Not evaluated
- IRR Consistency: Not evaluated
---
## DNS & HOSTNAME ANALYSIS
| Attribute | Value |
|---|---|
| **PTR Hostname** | 212-83-178-11.rev.poneytelecom.eu |
| **Forward Resolution** | 212-83-178-11.rev.poneytelecom.eu |
| **Forward Confirmed** | Yes |
| **Hosted Domains** | None |
| **Email Auth (SPF/DMARC)** | Not configured |
| **TXT Records** | 0 |
DNS Relationships: 24 relationships identified, primarily DNS associations to the same PTR hostname and network associations to SCALEWAY-DEDIBOX-IPFO subnet.
---
## SERVICE & PORT ANALYSIS
Open Ports: None detected
HTTP Services: None detected
TLS Certificates: None detected
SSH Banner: None detected
SMTP Banner: None detected
Status: Host appears firewall-protected with no active services exposed to the internet.
Network Role Classification: Cloud provider hosting infrastructure.
---
## OBSERVATION HISTORY
Total Historical Observations: 21 signals
Recent Activity (2026-06-15):
- Signal Type 2344 (Blacklist): Listed on 8 sources with 1 high-severity listing detected
- Signal Type 2349 (Control Plane): Operator score 0.2609 (Basic)
- Signal Type 15 (Profile): Overall confidence 0.2579; 14 observations across 6 dimensions
- Signal Type 8 (Port Scan): Multiple ports scanned; services detected as open
- Signal Type 11 (Geolocation): ICMP blocked; unable to validate geolocation data
Observation Trends: Multiple signals indicate recent network scanning activity and blacklist enumeration.
---
## NEIGHBORHOOD ANALYSIS
Subnet: 212.83.178.11/24
Subnet Classification: Mostly Clean
Abuse Density: 1/10
Inherited Risk: 2/10
Total Siblings: 1
Active Siblings: 1
Threat Siblings: 1
Neighbor Risk Distribution:
- High Risk: 0
- Medium Risk: 0
- Low Risk: 0
---
## RELATIONSHIP GRAPH
Identified Relationships: 24
- DNS Associations: 21 relationships to hostname 212-83-178-11.rev.poneytelecom.eu
- Network Associations: 3 relationships to SCALEWAY-DEDIBOX-IPFO network
---
## RECOMMENDED ACTIONS
Security Recommendations: None generated (Risk Score: 25)
Firewall Rules: Not applicable based on current risk profile
Analyst Notes: While the IP presents a low-risk profile, the presence of blacklist listings and recent port scanning activity warrants monitoring. The host's firewall-protected status reduces immediate exploitation risk.
---
## CONCLUSION
IP 212.83.178.11 is a cloud-hosted infrastructure address in Paris, France, operated by Scaleway. The IP exhibits low-risk characteristics with no active threat indicators. However, historical observations indicate the address has been enumerated on multiple blacklist sources and subjected to port scanning. The absence of open services suggests the host is properly secured.
SOC Analyst Guidance: Monitor for changes in threat profile. No immediate blocking action required, but maintain awareness of blacklist enumeration activity.
---
*Generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | MNT-TISCALIFR |
| ASN | AS12876 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | RIPE |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 212-83-178-11.rev.poneytelecom.eu |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 212-83-178-11.rev.poneytelecom.eu |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 22% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-20 05:44:30 UTC |
| Last Seen | 2026-06-28 11:10:05 UTC |
| Profile Built | 2026-06-29 06:00:59 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 26 |
Full dossier details are available via our API.