IPDebrief

77.252.213.166

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 77.252.213.166/32

Date: July 2026

Classification: Routine Monitoring

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP 77.252.213.166 is currently classified as Low Risk with no active threat indicators. The address is firewalled with no open services, though historical data indicates association with Polish hosting infrastructure (Netia SA, AS12741). No malicious activity or campaign correlation was detected during the observation period.

---

## Technical Profile

Geolocation: London, GB (profile) | Poland, PL (ASN data from history)

ASN: AS12741 (Netia SA, PL)

CIDR Block: 77.252.0.0/16 (Netia allocated 2007-02-01)

Network Role: Firewalled / No Services

Open Ports: None

TLS/Certificates: None

PTR Resolution: None

Risk Scores:

---

## Threat Indicators

Current Status: No active threats detected

Blacklist Status: Listed on 8 threat intelligence sources (2 high-severity listings)

Tor/Proxy/VPN: False

Known Attacker: False

Spam Source: False

Campaign Correlation: 0 matches

---

## Observation History (12 observations)

Recent activity shows:

Trend: Stable with no significant risk escalation. No persistent malicious behavior observed.

---

## Network Relationships & Neighborhood

Relationship Graph: No related entities identified (0 relationships)

Neighborhood Analysis (77.252.213.0/24):

Traceroute: 19 hops, transit networks include Comcast and Cogent

---

## Recommended Actions

Current Status: No immediate action required. IP is passive with no active services.

Defensive Recommendations:

---

## Intelligence Assessment

This IP address represents low-risk infrastructure under Netia SA hosting. While geolocation data shows London attribution, ASN registration indicates Polish ownership (Netia SA). The absence of open ports and services, combined with zero neighborhood abuse density, suggests this is not an active threat vector. Historical listing activity warrants continued monitoring but does not indicate immediate threat.

Confidence Level: Moderate (due to geolocation inconsistencies)

Threat Posture: Inactive / Low Risk

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇵🇱 Poland
RegionMazovia
CityJózefosław
TimezoneEurope/Warsaw
Latitude51.92
Longitude19.15

🏢 Ownership & Registration

OrganizationAS12741-MNT
ASNAS12741
Network NameORION-Warszawa
CIDR Block77.252.213.128/26
RIRRIPE
CountryPL
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR77-252-213-166.static.ip.netia.com.pl
Forward ConfirmedYes — FCrDNS verified
Forward Hostnames77-252-213-166.static.ip.netia.com.pl

🔐 DNS Hygiene

Hygiene Score40% (Fair)
SPF0/2 domains
DMARC0/2 domains
FCrDNSVerified
DNSSECValid
CAANot configured
Domains Checked2 domains

☁️ Network Classification

InfrastructureUnknown
Service PurposeMulti-Service Host
Network TierUnknown — Insufficient routing data to classify
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
80httptcp—
8080http-alttcp—
8443https-alttcp—
Closed Ports22, 25, 443, 3389 (3 open / 7 scanned)
ServerWeb server detected
HTTP Title—

🔐 TLS Certificate

An expired certificate for CN=jugglergames.synology.me was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.
🔒
CN=jugglergames.synology.me
Issued by CN=YR2, O=Let's Encrypt, C=US
Self-signed: No
SANsjugglergames.synology.me
Valid From2026-06-27T16:49:51+00:00
Valid Until2026-09-25T16:49:50+00:00 (expired)
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha384ECDSA
Validity Period89 days

🛡️ Public Network Snapshot

Origin ASNAS12741
Network Prefix77.252.0.0/16
Route mappingFound
HSTSNot detected
CSPNot detected
HTTP/2Not detected

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
0%
00
routing
0%
00
services
0%
00
ownership
0%
00
reputation
0%
00
geolocation
25%
11
Overall4%11
Coverage: 1/6 dimensions · Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-07-13 15:25:15 UTC
Last Seen2026-09-03 21:55:28 UTC
Profile Built2026-09-03 22:45:23 UTC
Data FreshnessLive
Signal Types24
Total Observations29
🔍 24 signal types · 29 observations collected
This report is generated from 24+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 77.252.213.166

Who owns the IP address 77.252.213.166?

77.252.213.166 is registered to AS12741-MNT. The address falls within the 77.252.213.128/26 network block. Registration is held at RIPE.

Where is 77.252.213.166 located?

Geolocation data places 77.252.213.166 in Józefosław, Mazovia, Poland. The local time zone is Europe/Warsaw. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 77.252.213.166 malicious or safe?

77.252.213.166 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 77.252.213.166?

The reverse DNS (PTR) record for 77.252.213.166 is 77-252-213-166.static.ip.netia.com.pl. This hostname is forward-confirmed, meaning it resolves back to the same address.

What ports are open on 77.252.213.166?

Responsive ports observed on 77.252.213.166 include 80, 8080, 8443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.

🏘️ Related IP Addresses

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.