81.249.252.2📋 Copy

# IP Intelligence Briefing: 81.249.252.2

## Executive Summary

IP address 81.249.252.2 presents a low-risk threat profile with an overall risk score of 25. The address is associated with FT-BRX (ASN 3215) and operates within the IP2000-ADSL-BAS network block. Classification indicates mobile broadband connectivity via Orange S.A. infrastructure. No active threat indicators, malicious campaigns, or blacklist enumerations were identified.

## Technical Profile

Network Classification:

• ASN: 3215 (FT-BRX)
• Organization: FT-BRX
• Network: IP2000-ADSL-BAS
• CIDR Block: 81.249.248.0/21
• RIR: RIPE
• Connection Type: Mobile (Orange S.A. carrier)

Geolocation:

• Reported Location: New York, US (US-NY)
• RIR Registration: France (RIPE)
• ISP Domain: wanadoo.fr (lfbn-idf3-1-125-2.w81-249.abo.wanadoo.fr)
• Geovalidation: Inconsistent (French registration vs. US geolocation signals)

DNS & Resolution:

• PTR Record: lfbn-idf3-1-125-2.w81-249.abo.wanadoo.fr
• Forward Resolution: Confirmed (1 hostname)
• Email Authentication: SPF record present
• DNSBL Status: Listed on 1 of 8 tested lists

Network Services:

• Open Ports: None detected
• Service Status: Firewalled / No Services
• TLS/HTTP: No certificates or web services

## Threat Intelligence

Current Risk Indicators:

• Risk Score: 25 (Low)
• Provider Score: 0
• Authority Score: 0
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: Empty

Control Plane Analysis:

• Route Stability: Unstable
• DNSSEC: Valid
• DNSBL Listings: 1/8 lists
• Operator Score: 0.2609 (Basic)
• IRR Consistency: Not evaluated
• Route Changes (30d): 0

## Observation History

Signal observation history contains 16 recorded events. Key observations include:

• 2026-07-27 14:25:12: ASN and organization registration confirmed (FT-BRX, RIPE)
• 2026-07-27 14:24:35: Geolocation signals detected (New York, US-NY) and traceroute attempts (30 hops, target not reached)
• Multiple observations indicate mobile broadband characteristics

The IP demonstrates temporal stability with no ownership changes and zero threat persistence days. No persistent malicious activity has been observed.

## Neighborhood Analysis

Subnet: 81.249.252.2/24

• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Risk Distribution: No high or medium-risk neighbors detected

No neighboring IPs in the immediate /24 subnet exhibited malicious activity or elevated risk scores.

## Relationships

Associated Entities:

• DNS Hostname: lfbn-idf3-1-125-2.w81-249.abo.wanadoo.fr (3 associations)
• Network: IP2000-ADSL-BAS (1 association)

No organizational or certificate-based relationships were identified.

## Recommendations

Based on the risk profile:

1. Monitoring: Continue standard monitoring given the low-risk classification

2. Firewall Rules: No specific blocking recommended; standard egress/ingress policies apply

3. Geolocation Discrepancy: Note the mismatch between French RIR registration and US geolocation signals—may indicate routing anomalies or CDN/ISP infrastructure

4. DNSBL: Investigate the single DNSBL listing to understand the basis for the entry

5. Mobile Classification: Treat as mobile broadband endpoint; consider mobile-specific threat indicators

## Conclusion

IP 81.249.252.2 is classified as low-risk with no active threat indicators. The address operates on Orange S.A. mobile broadband infrastructure under FT-BRX management. While geolocation data shows inconsistencies, the overall threat profile remains benign. No immediate defensive actions are required beyond standard security hygiene practices.

---

*Report generated: 2026-07-27 | Intelligence Source: IPDebrief*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.