62.210.36.194📋 Copy

# IP INTELLIGENCE BRIEFING: 62.210.36.194

## Executive Summary

IP 62.210.36.194 is a low-risk cloud infrastructure endpoint operating within the Scaleway provider network (ASN 12876) in Paris, France. The IP demonstrates benign operational characteristics with minimal abuse indicators. However, the DNSBL listing and email-associated hostname warrant monitoring for potential email infrastructure abuse.

---

## Infrastructure Profile

Provider & Classification

• Organization: SCALEWAY (ASN 12876)
• Infrastructure Type: CloudCompute / Web Server
• Network Classification: Cloud hosting with hosting services enabled
• Geolocation: Paris, Île-de-France, France (FR)

Network Role

• CIDR Block: 62.210.0.0/16
• Route Stability: Unstable (route changes observed in 30-day window)
• BGP Prefix: 62.210.0.0/16

DNS Configuration

• PTR Hostname: planet194.emails.wkmtom.us.com
• Forward Resolution: Confirmed to us.com domain
• Email Authentication: SPF enabled, DMARC not configured
• DNSSEC: Valid
• DNSBL Status: Listed on 1 of 8 blacklists

---

## Technical Services

Open Ports

• TCP/80: HTTP (Web Server)
• TCP/443: HTTPS
• TCP/8080: HTTP-Alt (Alternate HTTP)

Server Fingerprint

• Web Server: Apache/2.4.59 (Debian)
• Infrastructure: Standard cloud hosting stack

---

## Threat Indicators

Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence: Not elevated
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Threat Campaigns

• Campaign Likelihood: None
• Cert Matches: 0
• Correlated IPs: 0

---

## Neighborhood Analysis (62.210.36.0/24)

• Abuse Density: 0% (Clean)
• Classification: Clean subnet
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 0
• Risk Distribution: No high-risk neighbors detected

---

## Relationship Graph

Key Associations (49 total relationships)

• DNS Associations: Multiple links to planet194.emails.wkmtom.us.com
• Network Associations: SCALEWAY-DEDIBOX infrastructure
• Pattern: Consistent cloud hosting infrastructure deployment

---

## Observation History

Signal Count: 21 observations (most recent: 2026-06-14)

Temporal Trends

• Classification Stability: Consistently classified as "clean" across observations
• Inherited Risk: 0 (no neighborhood risk inheritance)
• Ownership Changes: 0 (stable ownership)
• Threat Persistence: 0 days (no persistent malicious activity)

Observed Signals

• Geolocation consistently inferred as France (confidence: 0.52)
• Provider consistently identified as Scaleway CloudCompute (confidence: 0.90)
• Subnet abuse density maintained at 0 (confidence: 0.40)
• Occasional connection failures observed (confidence: 0.30)

---

## Recommended Actions

Firewall/Security Rules

```bash

# Monitor rather than block - low risk but DNSBL listed

# Recommended: Rate limiting on port 8080

iptables -A INPUT -p tcp --dport 8080 -m limit --limit 10/min -j ACCEPT

iptables -A INPUT -p tcp --dport 8080 -j DROP

```

Monitoring Priorities

1. Track DNSBL listing status (currently 1/8 lists)

2. Monitor for DMARC policy implementation

3. Watch for changes in hostname associations

4. Monitor for unusual traffic patterns on port 8080

Risk Mitigation

• Current risk level permits normal traffic handling
• No immediate blocking required
• Standard cloud infrastructure security controls apply
• Consider DMARC configuration for improved email authentication

---

## Intelligence Conclusion

IP 62.210.36.194 represents a standard cloud hosting endpoint with minimal threat indicators. The DNSBL listing and email-associated hostname suggest this may be part of an email infrastructure deployment. No evidence of malicious activity or campaign association was detected. The subnet demonstrates clean operational characteristics with no neighboring threats. SOC teams may monitor this IP for email-related activity but no immediate blocking action is warranted based on current intelligence.

Classification: LOW RISK - MONITOR

Last Updated: 2026-06-14

Data Confidence: HIGH

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.