82.86.129.180📋 Copy

# IP Intelligence Briefing: 82.86.129.180/32

Classification: Low Risk

Date: July 25, 2026

## Executive Summary

IP address 82.86.129.180 presents a low risk profile with a risk score of 25. The address is registered to Jose Luis Diaz under the Thundernet-Net001 network (ASN 272809, RIPE). No active services, threat indicators, or malicious behavior have been detected. The IP is currently firewalled with no open ports.

## Network Ownership & Registration

• Organization: Jose Luis Diaz
• Netname: Thundernet-Net001
• ASN: 272809
• CIDR Block: 82.86.128.0/19
• RIR: RIPE
• Abuse Contact: soporte.thundernet@gmail.com (available via RDAP)

## Geolocation Analysis

Geolocation data shows inconsistencies across multiple sources:

• Primary consensus: ES (Spain), Madrid timezone
• Alternative signals: VE (Venezuela), Toledo
• Accuracy radius: 500km
• GeoValidation: Inconsistent signals detected

## Threat Assessment

• Risk Score: 25 (Low)
• Abuse Confidence: Not applicable
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Threat Indicators: None detected
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## Network Behavior

• Services: None detected (Firewalled / No Services)
• Open Ports: None
• TLS Certificate: None
• DNS Resolution: No forward resolution
• PTR Hostnames: None
• Control Plane: BGP prefix 82.86.129.0/24, route stability: false

## Temporal Analysis

• Observations: 13 total signals recorded
• Ownership Changes: 0
• Threat Persistence: 0 days
• Persistently Malicious: False
• Historical Trend: No persistent malicious activity observed

## Neighborhood Analysis (82.86.129.0/24)

• Subnet Classification: Not applicable
• Abuse Density: 0
• Active Siblings: 0
• Threat Siblings: 0
• High Risk Neighbors: 0
• Total Siblings: 0

## Relationship Graph

• Connected Entities: 2 relationships identified
• Network References: Thundernet-Net001 (2 references)
• Organizational Links: None
• Hostname Associations: None
• Certificate Associations: None

## Recommended Actions

No specific remediation actions recommended. The IP presents minimal threat characteristics with no active services or malicious indicators. Standard monitoring protocols are sufficient.

## Analyst Notes

The IP address shows characteristics of a residential or private network endpoint with no public-facing services. Geolocation discrepancies should be monitored, but current data indicates benign network activity. The single DNSBL listing warrants periodic review but does not indicate active malicious use.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.