62.210.199.83📋 Copy

# IP Intelligence Briefing: 62.210.199.83/32

## Executive Summary

IP address 62.210.199.83 is associated with Scaleway cloud infrastructure in Paris, France. The IP presents a moderate risk profile (risk score 50/100) with 18 historical observations recorded. While the subnet (62.210.199.83/24) is classified as "mostly_clean" with low abuse density, the IP itself has triggered 2 DNSBL listings and is linked to 44 relationships including hostname associations and SCALEWAY-DEDIBOX network references.

## Network & Infrastructure Profile

• Organization: Scaleway (ASN 12876)
• Infrastructure Type: Cloud Compute / Hosting
• Geolocation: Paris, Île-de-France, France (FR)
• CIDR Block: 62.210.0.0/16
• DNS Resolution: 62-210-199-83.rev.poneytelecom.eu (forward confirmed)
• Services: No open ports detected; no HTTP/TLS services identified
• BGP Prefix: 62.210.0.0/16 (Origin ASN: 12876)
• Route Stability: False (route changes observed)

## Threat Indicators

• Risk Score: 50 (Moderate Risk)
• DNSBL Listings: 2 out of 8 total lists
• Known Threats: No active threat indicators in current profile
• Tor Exit/Proxy: Not a Tor exit node or proxy service
• Abuse Confidence: Low
• Threat Persistence: 0 days (not persistently malicious)

## Temporal Analysis (18 Observations)

Recent activity shows:

• ASN AS12876 online s.a.s. detected with reputation score 0
• Cloud infrastructure confirmed (Scaleway)
• Subnet abuse density: 1 (low)
• Subnet classification: "mostly_clean"
• Inherited risk score: 2
• Single threat sibling detected in /24 subnet
• Threat observation count: 1

## Relationship Network

44 relationships identified:

• DNS Associations: 62-210-199-83.rev.poneytelecom.eu (multiple records)
• Network Associations: SCALEWAY-DEDIBOX (cloud infrastructure)
• Additional relationships include certificates and correlated entities

## Neighborhood Context (62.210.199.83/24)

• Abuse Density: 1 (low)
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1
• Classification: mostly_clean

## Recommended Actions

The IP presents moderate risk and should be blocked or monitored:

Firewall Rules:

• iptables: `iptables -A INPUT -s 62.210.199.83 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 62.210.199.83 drop`
• nginx: `deny 62.210.199.83;`
• pfSense: `62.210.199.83/32`
• Cloudflare WAF: Block IP (expression: `ip.src eq 62.210.199.83`)
• AWS WAF: Block address (62.210.199.83/32)

Note: Recommendations are probabilistic and should be combined with additional threat intelligence signals before implementation.

## Analyst Notes

This IP is part of a cloud infrastructure environment with minimal neighborhood abuse. However, the 2 DNSBL listings and moderate risk score warrant defensive blocking. The single threat sibling in the /24 subnet suggests potential co-location with malicious actors. Monitor for any changes in threat indicators or increased activity from this IP or its associated hostnames.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.