83.110.178.226📋 Copy

# IP Intelligence Briefing: 83.110.178.226/32

Classification: LOW RISK - Single-Service Host

Risk Score: 25/100

Date of Analysis: 2026-07-29

---

## Executive Summary

IP address 83.110.178.226 presents a low-risk profile with no known malicious activity indicators. The IP is registered to ETISALAT-MNT (PLANTNET-EMIRNET) under ASN 5384 within the RIPE RIR. Observations indicate a single-service host with SSH exposure, no association with known threat campaigns, and minimal threat indicators across monitoring systems.

---

## Technical Profile

Network Attribution:

• ASN: 5384 (ETISALAT-MNT)
• Organization: PLANTNET-EMIRNET
• CIDR Block: 83.110.178.224/28
• RIR: RIPE

Geolocation:

• Country: France (FR)
• City: Marseille
• Region: Dubai, UAE (conflicting data)
• Timezone: Europe/Paris
• Note: Geographic data shows inconsistency between country code (FR) and regional designation (Dubai, UAE), suggesting potential proxying or data reporting variance.

Service Exposure:

• Open Ports: TCP/22 (SSH)
• SSH Banner: SSH-2.0-ROSSSH
• TLS Certificate: None observed
• HTTP Service: None detected

DNS Configuration:

• PTR Record: bba-83-110-178-226.alshamil.net.ae
• Forward Resolution: Confirmed (1 host)
• Email Authentication: SPF: Not configured, DMARC: Not configured
• Domain: alshamil.net.ae

---

## Threat Intelligence Findings

Active Indicators: None

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Pulsedive Risk: Not available

DNSBL Status: Listed on 1 of 8 monitored lists

Campaign Correlation: No known threat campaign associations

---

## Historical Observation Summary

Total Observations: 16 signals recorded

Recent Activity (2026-07-29):

• Ownership verification: Stable (0 changes)
• Traceroute: 15 hops, reached target
• Port scanning: SSH service confirmed
• DNS resolution: Validated
• No threat persistence indicators

Temporal Analysis:

• Threat Persistence Days: 0
• Is Persistently Malicious: No
• Ownership Changes: 0

---

## Network Relationships

Connected Entities:

1. DNS Association: bba-83-110-178-226.alshamil.net.ae (hostname)

2. Network Association: PLANTNET-EMIRNET (network)

• Total Relationships: 5

Neighborhood Analysis (83.110.178.0/24):

• Abuse Density: 0%
• Threat Siblings: 0
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 0

---

## Control Plane Assessment

Route Stability: Unstable

• Route Changes (30d): 0
• isRouteStable: False
• isMoAS: False
• RPKI State: Not available

DNSSEC: Valid

• CAA Records: Not configured
• DNSBL Listed: 1 of 8 lists

---

## Recommended Security Actions

Current Risk Score: 25/100

Recommended Actions:

• No specific firewall rules or blocking recommendations generated due to low risk profile
• Standard SSH monitoring recommended
• Consider implementing SPF/DMARC for domain alshamil.net.ae
• Monitor for route stability changes in future observations

Firewall Considerations:

• No immediate blocking recommended
• Standard ingress filtering applicable
• SSH traffic allowed per network policy

---

## SOC Analyst Notes

This IP address represents a low-priority monitoring target with no active threat indicators. The conflicting geolocation data (France vs. UAE regional designation) warrants periodic review but does not indicate malicious activity. The single SSH service exposure is consistent with normal server infrastructure. No immediate defensive action required beyond standard network monitoring procedures.

Confidence Level: HIGH — Based on comprehensive multi-source analysis with no contradictory threat signals.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.