212.96.178.19
Intelligence Briefing: 212.96.178.19
Asset Profile
The IP address 212.96.178.19 was registered to MNET-IP-MNT within the CZECHBONE-CZ network block (212.96.178.0/23). Geolocation data placed the host in StΕíbro, PlzeΕ Region, Czechia (CZ), with an ASN of 12570.
Risk Assessment
The address maintained a low-risk reputation profile with a score of 25. It was classified as a "Suspicious Host" with threat actor tags indicating suspicion, though no specific campaigns or active attack indicators were identified. The surrounding subnet was classified as "mostly_clean" with a low abuse density of 0.2.
Technical Observations
Network services remained inactive with no open ports detected; the host was identified as firewalled. DNS resolution returned `r-cecom-praha.itself.cz` under the domain `itself.cz`. Email authentication records confirmed the presence of SPF but indicated DMARC was not configured.
Operational Recommendation
Monitoring was recommended for the address due to its "Suspicious Host" classification, despite the low severity rating. No immediate firewall blocking was required based on the absence of active malicious traffic or service enumeration.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | MNET-IP-MNT |
| ASN | AS12570 |
| Network Name | CZECHBONE-CZ |
| CIDR Block | 212.96.178.0/23 |
| RIR | RIPE |
| Country | CZ |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | r-cecom-praha.itself.cz |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | r-cecom-praha.itself.cz |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 2/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 33% | 2 | 5 |
| Overall | 24% | 10 | 21 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-29 13:57:53 UTC |
| Last Seen | 2026-09-25 04:54:52 UTC |
| Profile Built | 2026-09-25 05:08:30 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 40 |
Full dossier details are available via our API.