84.40.152.253
# IP Intelligence Briefing: 84.40.152.253/32
## Executive Summary
IP 84.40.152.253 is a low-risk Carrier-Grade NAT (CGNAT) endpoint belonging to Netia SA in Poland. No active threat indicators, open services, or malicious behavior observed. Recommended: Monitor, no immediate blocking required.
---
## Risk Assessment
| Metric | Value |
|---|---|
| Risk Score | 0 (Low Risk) |
| Provider Score | 0 |
| Authority Score | 0 |
| Abuse Confidence | Not applicable |
| Blacklist Count | 0 |
Classification: CGNAT / Firewalled endpoint with no services exposed.
---
## Ownership & Registration
- Organization: NETIA-MNT / Netia SA
- Network Name: NETIA-CGNAT
- ASN: 12887 (NETIA-AS2)
- CIDR Block: 84.40.152.0/23
- RIR: RIPE
- Country: Poland (PL)
- City: Warsaw, Lesser Poland Region
- Registration Date: Historical data indicates allocation from 2004-09-03
---
## Network Classification
- Infrastructure Type: CGNAT (Carrier-Grade NAT)
- Service Status: Firewalled / No Services
- Open Ports: None detected
- CDN/Cloud/VPN: No
- Mobile/Residential: No
---
## Threat Indicators
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Active Campaigns: None correlated
- Threat Feeds: None triggered
---
## DNS Analysis
- PTR Hostnames: None resolved
- Reverse DNS: Not confirmed
- Domain: inetia.pl
- DNSSEC: Valid (true)
- Email Authentication: SPF record present (includes multiple IP ranges); DMARC not configured
- Hosted Domains: None
SPF Record: `v=spf1 ip4:213.241.120.224/27 ip4:213.146.49.0/28 ip4:195.114.160.23/32 ip4:87.204.24.244/32 ip4:81.219.55.0/28 ip4:81.219.55.200/28 include:spf.sint.pl -all`
---
## Control Plane Data
- Origin ASN: Not available
- BGP Prefix: Not available
- Route Stability: Not stable
- RPKI State: Not available
- DNSBL Listings: 0/0
- Route Changes (30d): 0
---
## Neighborhood Analysis
- Subnet: 84.40.152.0/24
- Abuse Density: 0
- Active Siblings: 0
- Threat Siblings: 0
- Inherited Risk: 0
No neighboring IPs identified with elevated risk profiles.
---
## Observation History
Total Observations: 16 signals
Recent Activity (2026-07-29):
- ASN 12887 (NETIA-AS2) confirmed via team-cymru-dns
- Domain inetia.pl resolved
- DNSSEC validation: Valid
- Blacklist checks: Clean (listed_count: 0)
- SPF records present for inetia.pl
Threat Persistence: 0 days
Malicious Activity: None observed
---
## Network Trace
- Hop Count: 30
- Transit Networks: Comcast
- First Hop RTT: 0.2ms
- Last Hop RTT: 129.8ms
- Timed Out Hops: 22
---
## Recommendations
Current Risk Level: LOW
Immediate Actions:
- No blocking required
- No firewall rules recommended
- No WAF rules recommended
Monitoring:
- Continue standard passive monitoring
- No active hunting required
- Low priority for threat intelligence correlation
Context:
This IP is a CGNAT endpoint from Netia SA, a legitimate Polish ISP. CGNAT addresses are commonly assigned to end-users and typically show no direct services. The absence of threat indicators, combined with the ISP registration and clean blacklist status, supports treating this IP as benign infrastructure.
---
*Report generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | NETIA-MNT |
| ASN | AS12887 |
| Network Name | NETIA-CGNAT |
| CIDR Block | 84.40.152.0/23 |
| RIR | RIPE |
| Country | PL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 84-40-152-253.cgnat.inetia.pl |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 84-40-152-253.cgnat.inetia.pl |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS12887 |
| Network Prefix | 84.40.152.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-20 12:28:53 UTC |
| Last Seen | 2026-08-31 18:01:13 UTC |
| Profile Built | 2026-08-31 18:03:11 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 84.40.152.253
Who owns the IP address 84.40.152.253?
84.40.152.253 is registered to NETIA-MNT. The address falls within the 84.40.152.0/23 network block. Registration is held at RIPE.
Where is 84.40.152.253 located?
Geolocation data places 84.40.152.253 in Krakow, Lesser Poland, Poland. The local time zone is Europe/Warsaw. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 84.40.152.253 malicious or safe?
84.40.152.253 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 84.40.152.253?
The reverse DNS (PTR) record for 84.40.152.253 is 84-40-152-253.cgnat.inetia.pl. This hostname is forward-confirmed, meaning it resolves back to the same address.