176.65.144.43📋 Copy

## IP Intelligence Briefing: 176.65.144.43/32

Classification: Low Risk Service Host

Date: 2026-07-30

Analyst: IPDebrief Intelligence Team

Executive Summary

IP 176.65.144.43 is classified as a low-risk service host (Risk Score: 25) operated by HRAMCOVS EDUARDS (ASN 209413) under the DEDIKIO network block (176.65.144.0/24). No active threat indicators, blacklistings, or known malicious activity observed. However, the subnet exhibits moderate abuse density (0.5) with one high-risk neighbor (176.65.144.212, Risk Score: 80) requiring situational awareness.

Technical Profile

Ownership & Registration:

• ASN: 209413
• Organization: HRAMCOVS EDUARDS
• Network Name: DEDIKIO
• RIR: RIPE
• CIDR: 176.65.144.0/24

Geolocation:

• Country: Switzerland (CH)
• Coordinates: 48.85°N, 9.27°E
• Timezone: Europe/Zurich
• Note: Geo validation shows inconsistent data across sources (geoConsensus: false)

Network Services:

• Port 22/TCP: SSH (SSH-2.0-OpenSSH_9.2p1 Debian-2)
• Port 8080/TCP: HTTP-alt (web proxy service)
• No TLS certificates detected
• No reverse DNS resolution

Control Plane:

• Route stability: UNSTABLE (isRouteStable: false)
• DNSBL listings: 1 of 8 total checks
• Operator Score: 0.1304 (Minimal)
• BGP Prefix: 176.65.144.0/24

Threat Assessment

Current Risk Indicators:

• No active threat indicators detected
• No known attacker associations
• No Tor exit node activity
• No spam source classification
• Zero blacklistings currently active
• Not identified as cloud, CDN, proxy, or VPN infrastructure

Historical Observations:

• 14 observations recorded since last reset
• Recent activity shows SSH service with Debian OpenSSH
• Geographic traces indicate London transit patterns (GB)
• No threat persistence indicators
• Threat observation count: 0

Neighborhood Analysis

Subnet: 176.65.144.0/24

Abuse Density: 0.5 (Moderate)

Total Siblings: 2 identified

Actionable Intelligence: Neighbor 176.65.144.212 requires monitoring due to high risk score (80). While this IP (176.65.144.43) shows benign characteristics, the subnet context suggests potential for lateral threat activity.

SOC Recommendations

1. Allow with monitoring: No immediate blocking required; IP shows legitimate service host characteristics.

2. Monitor neighbor 176.65.144.212: High-risk neighbor warrants enhanced scrutiny for potential coordinated activity.

3. Review route stability: Unstable BGP routing may indicate network issues or potential infrastructure changes.

4. Geographic verification: Consider validating Switzerland location claims against actual traffic patterns.

5. Port 8080: HTTP-alt service on non-standard port may indicate proxy usage; monitor for suspicious outbound connections.

Confidence Level: MEDIUM

Data quality limited by geo validation inconsistencies and route instability. Recommend periodic re-assessment if threat intelligence changes or subnet activity increases.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.