84.252.113.63📋 Copy

# IP INTELLIGENCE BRIEFING

## Target: 84.252.113.63/32

---

EXECUTIVE SUMMARY

Target 84.252.113.63 presents a LOW RISK profile (Risk Score: 25). No active threat indicators detected. No services detected (Firewalled / No Services). No open ports identified. Recommended: Monitor but no immediate blocking required.

---

OWNERSHIP & INFRASTRUCTURE

• ASN: 212238
• Organization: ONETSOLUTIONS-MNT
• Network Name: FR-ONETSOLUTIONS-NET-2-20181116
• CIDR Block: 84.252.113.0/24
• RIR: RIPE
• Abuse Contact: Available via RDAP
• Abuse Email: protonvpn@protonmail.com (noted in history)

---

GEOLOCATION ANALYSIS

• Country: Mexico (MX)
• Region: VA
• City: Ashburn
• GeoConsensus: True
• GeoPlausible: False (inconsistency detected)
• Accuracy Radius: 1800 km
• Timezone: America/Mexico_City
• Geolocation Sources: 1

*Note: Geolocation data shows inconsistencies (MX country code vs VA region). Further investigation may be warranted if traffic patterns suggest different origin.*

---

THREAT PROFILE

• Reputation: Low Risk
• Risk Score: 25
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Cloud/CDN/Proxy/Vpn: No
• Residential/Mobile: No
• Hosting Provider: No

---

NETWORK SERVICES

• Open Ports: None detected
• HTTP Title: None
• TLS Certificate: None
• Service Banner: None
• Status: Firewalled / No Services

---

NEIGHBORHOOD ANALYSIS

• Subnet: 84.252.113.0/24
• Total Siblings: 1
• Active Siblings: 1
• Abuse Density: 0.00%
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 1
• Neighbor IP: 84.252.113.54 (Risk Score: 0, Authority Score: 50)

*Network exhibits minimal abuse density. No correlated threat activity in immediate neighborhood.*

---

OBSERVATION HISTORY (14 Observations)

Recent observations from 2026-07-23:

• Confidence: 0.30 (network classification), 0.28 (geolocation), 0.90 (organization), 0.95 (network details)
• Consistent Findings: ASN 212238, Organization ONETSOLUTIONS-MNT, Country MX
• Abuse Email: protonvpn@protonmail.com noted in high-confidence signals
• Signal Types: Network classification, geolocation inference, organization registration, network registration

*No persistent malicious behavior observed. Threat observation count: 0.*

---

RELATIONSHIPS

• Same Network: FR-ONETSOLUTIONS-NET-2-20181116
• Related Entities: 1
• Certificates: None
• Hostnames: None

---

RECOMMENDED ACTIONS

• Risk Score: 25 (Low)
• Firewall Rules: None recommended
• Security Recommendations: None

*Due to low risk profile and absence of threat indicators, no immediate blocking or mitigation actions required. Monitor for service activation or reputation degradation.*

---

ANALYST NOTES

1. Abuse Email Discrepancy: Abuse contact protonvpn@protonmail.com suggests possible association with ProtonVPN infrastructure despite no Tor/VPN classification. Verify if this is a hosting provider or actual VPN service.

2. Geolocation Inconsistency: Country code MX with VA region designation warrants attention if traffic originates from expected location.

3. DNSBL Listing: Single DNSBL listing among 8 total lists indicates minimal reputation issues.

4. Network Classification: Static classification (Firewalled / No Services) suggests non-public infrastructure.

---

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.