82.74.72.204📋 Copy

# IP INTELLIGENCE BRIEFING: 82.74.72.204

Classification: LOW RISK / RESIDENTIAL MOBILE CARRIER

Date: Current Assessment

Risk Score: 25/100

---

## EXECUTIVE SUMMARY

IP 82.74.72.204 is a low-risk residential mobile carrier endpoint operated by VodafoneZiggo's IP Authority (ASN 33915) in Assen, Netherlands. The address shows minimal threat activity, no active services, and no blacklist listings. No immediate security actions required.

---

## TECHNICAL PROFILE

---

## THREAT ASSESSMENT

Current Status: Clean / No Active Threats

• Blacklist Status: 0 listings across 8 monitored feeds
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable

Service Exposure: None detected. No open ports, no TLS certificates, no HTTP services observed.

---

## NETWORK CONTEXT

DNS Resolution:

• PTR Record: 82-74-72-204.cable.dynamic.v4.ziggo.nl
• Forward Resolution: Confirmed (1 hostname)
• Domain: ziggo.nl

Control Plane:

• BGP Prefix: 82.74.0.0/15
• Route Stability: Unstable (route changes observed)
• DNSSEC Valid: Yes
• DNSBL Listed: 1 of 8 lists (non-blocking)

---

## OBSERVATION HISTORY

Total Signals: 23 observations

Recent Activity (June 25, 2026):

• Operator Score: 0.3478 (Basic classification)
• DNS CAA records: 3 issuers detected
• Network classification: Mobile Carrier confirmed
• No persistent malicious behavior detected

Temporal Indicators:

• Threat Observation Count: 1
• Is Persistently Malicious: No
• Ownership Changes: 0

---

## RELATIONSHIP ANALYSIS

DNS Associations:

• 82-74-72-204.cable.dynamic.v4.ziggo.nl

Network Affiliation:

• Same Network: ZIGGO-CM
• Multiple duplicate network relationships detected

---

## SUBNET ANALYSIS

Subnet: 82.74.72.0/24

• Abuse Density: 0 (Mostly Clean)
• Total Siblings: 1
• Threat Siblings: 1
• Inherited Risk: 2/100
• Classification: Mostly clean subnet

---

## SECURITY ACTIONS

Recommended Actions: None

The IP address presents minimal risk and does not require special handling. Standard residential/mobile carrier traffic handling is appropriate. No firewall rules or WAF policies recommended beyond default allow policies for legitimate traffic from this range.

---

## ANALYST NOTES

This IP is a standard residential/mobile carrier endpoint with no active services or threat indicators. The single DNSBL listing is non-blocking and does not impact operational security posture. The IP is part of VodafoneZiggo's dynamic residential/mobile pool. No correlation to known malicious campaigns or infrastructure.

Recommendation: Monitor as part of normal residential traffic baseline. No escalation required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.