62.115.124.79
Intelligence Briefing: IP 62.115.124.79/32
Risk Assessment
The IP address was flagged as Low Risk with a risk score of 25. The profile carried a threat actor classification of "Suspicious Host," though no specific campaigns or threat indicators were detected. The overall confidence label for the analysis was Very Low.
Ownership and Geolocation
Registration data linked the address to ASN 1299 (se-twelve99-1-MNT) within the RIPE registry. Geolocation consensus placed the host in France (FR), though geo sources disagreed on the country, with Sweden (SE) also cited. The BGP prefix originated as 62.115.0.0/16.
Network Behavior
Scanning indicated the host was classified as "Firewalled / No Services." No open ports, TLS certificates, or HTTP titles were returned. DNS records resolved to adm-b11-link.ip.twelve99.net with PTR forward confirmation pending.
Threat Activity
Blacklist count remained at zero across all feeds. The address was not identified as a Tor exit node, proxy, or CDN endpoint. Behavioral metrics showed zero honeypot hits, enumeration strikes, or WAF violations.
Neighborhood Context
The /24 subnet (62.115.124.79/24) was classified as mostly clean with an abuse density of 0.1667. The address shared a neighborhood with six active siblings, including one threat sibling.
Recommendation
Analysis recommended monitoring for changes due to signal contradictions present in the data. The profile was marked as Live with the newest observation dated 2026-09-15.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | se-twelve99-1-MNT |
| ASN | AS1299 |
| Network Name | EU-ARELION-20140617 |
| CIDR Block | 62.115.112.0/20 |
| RIR | RIPE |
| Country | EU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | adm-b11-link.ip.twelve99.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | adm-b11-link.ip.twelve99.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 19% | 2 | 2 |
| Overall | 17% | 9 | 10 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 23:23:09 UTC |
| Last Seen | 2026-09-15 06:23:45 UTC |
| Profile Built | 2026-09-15 06:35:49 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 26 |
Full dossier details are available via our API.