2a12:f545:b7b8:295d:884e:322c:e806:9cbf
## IPDEBRIEF THREAT INTELLIGENCE BRIEFING
IP Address: 2a12:f545:b7b8:295d:884e:322c:e806:9cbf/128
Analysis Date: 2026-11-03
Classification: Unknown Intent / Low Risk
EXECUTIVE SUMMARY
The IPv6 address 2a12:f545:b7b8:295d:884e:322c:e806:9cbf presents as a low-risk endpoint with no significant threat indicators. The address belongs to ASN 214483 (FIBERPOWER-AS), originating from the 2a12:f540::/29 prefix block. The IP has been observed in the network for approximately 24 hours with no evidence of malicious activity.
NETWORK CLASSIFICATION
- Network Role: Firewalled / No Services
- Infrastructure Type: Not classified (insufficient routing data)
- Cloud/Proxy/VPN: No indicators of cloud, CDN, proxy, VPN, Tor, or hosting services
- Open Ports: None detected
- Services: No active services identified
- TLS/HTTPS: No certificates or HTTP titles observed
GEOLOCATION ANALYSIS
- Geographic Origin: Seychelles (SC) according to MaxMind GeoLite2
- Region: Île-de-France, Paris (note: geographic data shows inconsistencies)
- Coordinates: -4.58, 55.67
- GeoConsensus: True
- GeoPlausible: False (indicates geographic anomalies)
OWNERSHIP & REGISTRATION
- ASN: 214483 (FIBERPOWER-AS - FiberPower LLC, US)
- BGP Prefix: 2a12:f540::/29
- Registration Date: 2022-05-18 (RIR: RIPE)
- Ownership Data: No ownership information available
THREAT INDICATORS
- Risk Score: 0
- Abuse Confidence Score: None
- Blacklist Count: 0
- Threat List Status: Not listed on any known threat feeds
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
SIGNAL HISTORY
The IP has been observed 10 times between 2026-11-02T11:28:08 and 2026-11-03T11:44:35. Key observations include:
- DNS: No PTR records, no forward resolution confirmed
- Routing: Stable BGP prefix with no route changes in 30 days
- Threat Persistence: 0 days (not persistently malicious)
- Threat Observations: 1 total observation
- Ownership Changes: 0
NEIGHBORHOOD ANALYSIS
- Subnet: 2a12:f545:b7b8:295d:884e:322c:e806:9cbf/48
- Abuse Density: 0
- Threat Siblings: 0
- Active Siblings: 0
- High/Medium/Low Risk Neighbors: 0 each
RELATIONSHIPS
No relationships were discovered. The IP has no associated:
- Hostnames
- Organizations
- Certificates
- Related subnets
RECOMMENDED ACTIONS
Risk Level: Minimal / Allow
Based on the IP's risk profile and signal history, no blocking or restrictive actions are recommended. The IP shows:
- Zero risk score
- No threat indicators
- No blacklist presence
- No active services or ports
- Low confidence profile (0.2 overall confidence)
Suggested Firewall Rule: Allow (no restrictions required)
INTELLIGENCE CONTEXT
This IPv6 address is a newly observed endpoint with very limited intelligence coverage. The combination of:
- Zero risk indicators
- No threat activity
- No network services
- Fresh observation window (24 hours)
Suggests this is either a legitimate enterprise IPv6 address or a passive network endpoint. The geographic inconsistencies (Seychelles country code with Paris coordinates) warrant monitoring but do not currently indicate
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Unknown |
| ASN | — |
| Network Name | — |
| CIDR Block | — |
| RIR | — |
| Country | — |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS214483 |
| Network Prefix | 2a12:f540::/29 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 20% | 1 | 1 |
| routing | 20% | 1 | 1 |
| services | 20% | 1 | 1 |
| ownership | 20% | 1 | 1 |
| reputation | 20% | 1 | 1 |
| geolocation | 20% | 1 | 1 |
| Overall | 20% | 6 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Low (30%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-11-02 11:28:08 UTC |
| Last Seen | 2026-11-03 11:44:35 UTC |
| Profile Built | 2026-11-03 12:07:47 UTC |
| Data Freshness | Live |
| Signal Types | 11 |
| Total Observations | 11 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 2a12:f545:b7b8:295d:884e:322c:e806:9cbf
Where is 2a12:f545:b7b8:295d:884e:322c:e806:9cbf located?
Geolocation data places 2a12:f545:b7b8:295d:884e:322c:e806:9cbf in Paris, Île-de-France, SC. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 2a12:f545:b7b8:295d:884e:322c:e806:9cbf malicious or safe?
2a12:f545:b7b8:295d:884e:322c:e806:9cbf currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.