104.244.73.193📋 Copy

IP Intelligence Briefing: 104.244.73.193

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Score: 59 (Moderate Risk)
• Provider: BuyVM (ASN 53667)
• Geolocation: Phoenix, AZ, US (ARIN-registered)
• Threat Indicators:

- Identified as a Tor exit node (high-risk for anonymity-based abuse).

- Listed in 1 DNSBL (open resolver).

• Network Role: Tor exit node (firewalled, no services detected).
• DNS:

- PTR hostname: `tor-exit.for-privacy.net`

- SPF/DMArc records detected for `for-privacy.net`.

---

**2. Observation History**

• Recent Activity:

- Tor exit node activity observed (1 observation in last 7 days).

- DNS validation issues (ICMP blocked, unable to confirm geolocation).

- BGP route stability: 0 route changes in 30 days.

• Risk Trends:

- Stable moderate risk score (59) since first observation.

- No signs of persistent malicious activity.

---

**3. Relationships**

• Network Associations:

- Linked to BUYVM-LUXEMBOURG-01 (same /24 subnet).

• DNS Associations:

- Resolves to `tor-exit.for-privacy.net` (hostname with SPF/DMArc).

• Threat Context:

- No direct malware campaigns or known attacker associations.

---

**4. Neighborhood Analysis**

• Subnet: `104.244.73.0/24`
• Abuse Density: 85.7% (high abuse risk subnet).
• Neighbor IPs:

- 6 active siblings (192 total in subnet).

- 6 neighbors flagged as medium-risk (40–59 score).

- High-risk neighbors: 0.

---

**5. Recommendations**

• Monitor Traffic: Track Tor exit node activity due to privacy risks.
• Block/Rate Limit: Consider blocking outbound traffic to this IP if Tor exit node activity is suspicious.
• DNSBL Check: Verify if the IP is listed in additional DNSBLs.
• Subnet Review: Investigate the high-abuse subnet (`104.244.73.0/24`) for broader risk exposure.

---

Note: This IP is associated with Tor exit infrastructure, which may be used for legitimate privacy purposes or malicious activities. Further analysis of traffic patterns and threat feeds is recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.