82.180.68.2📋 Copy

# IPDebrief Intelligence Briefing: 82.180.68.2/32

## Executive Summary

IP 82.180.68.2 is a low-risk residential PPPoE dynamic pool address hosted by Wemacom in Schwerin, Germany. No active threat indicators, malicious services, or abuse patterns observed. Subnet shows clean classification with zero abuse density.

## Profile Overview

## Threat Assessment

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Campaign Associations: None
• Threat Feeds: None populated
• Abuse Confidence Score: Not applicable

## Network Characteristics

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Service: None
• Connection Type: Residential/PPPoE
• Infrastructure Type: Not cloud/CDN/VPN/proxy

## DNS Analysis

• PTR Hostname: subs.wemacom.net
• Forward Resolution: subs.wemacom.net
• Forward Confirmed: False
• SPF Record: Not present
• DMARC Record: Not present
• Hosted Domains: 0

## Control Plane Data

• BGP Prefix: 82.180.64.0/18
• Route Stable: False
• DNSSEC Valid: True
• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not evaluated
• IRR Consistency: Not evaluated

## Neighborhood Analysis (82.180.68.0/24)

• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• High Risk IPs: 0
• Medium Risk IPs: 0
• Low Risk IPs: 0

## Historical Observations (19 signals)

Recent activity indicates stable ownership with no changes. Geolocation signals consistently place the IP in Germany (DE, Schwerin) with moderate confidence (0.52). Ownership and ASN data show high confidence (0.90-0.95). No ownership changes detected during observation period. Threat persistence days: 0.

## Relationship Graph

• Network Associations: PPPoE-DYNAMIC-POOL-01 (multiple same-network links)
• DNS Associations: subs.wemacom.net (multiple DNS association links)
• Total Relationships: 7

## Recommended Actions

No immediate blocking or filtering actions recommended. The IP exhibits characteristics of legitimate residential connectivity with no malicious indicators. However, the DNSBL listing (1 of 8 lists) warrants monitoring if the IP begins exhibiting anomalous behavior.

## SOC Analyst Notes

• Classification: Residential/PPPoE pool IP
• Risk Level: Low
• Action: Monitor or allow based on organizational policy
• Escalation: Not required
• Threat Intelligence Value: Low – standard residential assignment

---

*Report generated: Current timestamp*

*Data source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.