80.9.247.16📋 Copy

# IP Intelligence Briefing: 80.9.247.16/32

Date: 2026-07-22

Classification: Routine Threat Intelligence

Risk Level: Low Risk

---

## Executive Summary

IP 80.9.247.16 is a French residential broadband endpoint associated with Orange S.A. (AS3215). The address resolves to a Wanadoo.fr domain under the IP2000-ADSL-BAS network block. Current analysis indicates no active threat indicators, no open services, and no malicious campaign associations. The IP operates as a standard residential connection with firewall-protected status.

---

## Technical Profile

Ownership & Registration:

• ASN: 3215 (FT-BRX / Orange S.A.)
• Network: IP2000-ADSL-BAS (80.9.240.0/21)
• RIR: RIPE
• Organization: FT-BRX
• Abuse Contact: gestionip.ft@orange.com

Geolocation:

• Country: France (FR)
• Region: Occitanie
• City: Fonsorbes (Consensus: Issy Les Moulineaux CEDEX 9)
• Timezone: Europe/Paris
• Accuracy Radius: 500km

Network Classification:

• Network Role: Firewalled / No Services
• Connection Type: Mobile (LTE/5G)
• Mobile Carrier: Orange S.A.
• Carrier ID: MCC 208, MNC 01
• Infrastructure: Not Cloud, CDN, VPN, Proxy, or Hosting

DNS Resolution:

• PTR Hostname: alyon-656-1-662-16.w80-9.abo.wanadoo.fr
• Forward Resolution: Confirmed
• Hosted Domain: wanadoo.fr
• Email Authentication: SPF and DMARC configured

---

## Threat Intelligence

Current Threat Status:

• Risk Score: 0
• Abuse Confidence Score: N/A
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Campaign Indicators:

• Known Campaigns: None
• Cert Matches: 0
• Correlated IPs: 0
• Threat Persistence Days: 0
• Persistently Malicious: No

Control Plane Data:

• BGP Prefix: 80.9.128.0/17
• Route Stability: False
• DNSBL Listed: 0 of 8 total lists
• Operator Score: 0.2609 (Basic)

---

## Observation History

Analysis of 17 signal observations reveals stable characteristics with no escalation in risk profile over the observation period. Key observations include:

• Ownership: Consistent FT-BRX registration with no ownership changes
• Geolocation: Multiple geo sources confirm France placement (RIPE, Cymru, AlienVault)
• Threat Signals: One AlienVault OTX signal flagged with reputation score of 0
• Persistence: No persistent malicious activity detected

---

## Relationship Analysis

DNS Associations:

• alyon-656-1-662-16.w80-9.abo.wanadoo.fr (multiple records)

Network Associations:

• IP2000-ADSL-BAS (primary network block)

No significant cross-domain relationships or certificate associations identified.

---

## Neighborhood Analysis

/24 Subnet (80.9.247.16/24):

• Neighbor Count: 0
• Abuse Density: 0
• High/Medium/Low Risk Neighbors: 0/0/0

Assessment: No adjacent IPs show threat indicators. The subnet exhibits normal residential broadband characteristics.

---

## Security Recommendations

Action Score: 0

Recommended Actions: None

The IP address presents no actionable threat indicators at this time. Standard monitoring is appropriate. No firewall rules or blocking recommendations are warranted based on current risk profile.

---

Analysis Notes: This IP represents a legitimate residential broadband connection from a major French ISP (Orange/Wanadoo). The absence of open services, combined with firewall protection status and clean threat indicators, supports classification as benign residential traffic. No immediate action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.