IPDebrief

181.197.40.112

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 181.197.40.112/32

Classification: Low Risk / Legitimate Infrastructure

Date of Analysis: Current

Risk Score: 25/100

---

## Executive Summary

The IP address 181.197.40.112 is classified as Low Risk with a risk score of 25. The address is part of Cable Onda's infrastructure in Panama and shows no active threat indicators, malicious reputation, or abuse patterns. No immediate defensive action required.

---

## Ownership & Network Classification

AttributeValue
ASN18809
OrganizationCable Onda
Network Block181.197.0.0/17
CIDR181.197.40.0/22 (BGP origin)
RIRLACNIC
CountryPanama (PA)
CityPanama City
RegionProvincia de Panamá

The IP is registered to Cable Onda, a Tier-1 ISP operating in Panama. The address falls within a 17-bit allocation (181.197.0.0/17) indicating enterprise-grade infrastructure allocation.

---

## Threat Assessment

Risk Indicators

Network Role Classification

The IP shows no active network services and appears to be a non-public address, likely an internal or firewall-protected system.

---

## Control Plane Data

MetricValue
Origin ASN18809
BGP Prefix181.197.40.0/22
Route StabilityFalse
Route Changes (30d)0
DNSSEC ValidYes
DNSBL Listed1 of 8 lists
Operator Score0.1304 (Minimal)

The control plane shows minimal operator activity with one DNSBL listing among eight checked lists. Route stability is flagged as false but no recent route changes have occurred.

---

## Neighborhood Analysis

Subnet: 181.197.40.112/24

Abuse Density: 0

Classification: Clean

Siblings Analyzed: 1

Active/Threat Siblings: 0

No neighboring IPs identified with threat characteristics. The /24 subnet shows zero abuse density, indicating the address is not part of a coordinated malicious infrastructure.

---

## Historical Observation Record

Total Observations: 15

Threat Observation Count: 0

Ownership Changes: 0

Threat Persistence Days: 0

Recent observations (2026-07-26) confirm consistent geolocation data for Panama City. No signal changes indicating escalating risk behavior. The IP maintains stable ownership with no historical evidence of malicious activity.

---

## Related Entities

Four relationships identified, all classified as "Same Network" pointing to the Cable Onda allocation: 181.197.0.0 - 181.197.127.255. No organizational, hostname, or certificate relationships beyond network boundaries.

---

## Recommended Actions

Based on the risk profile, no immediate action is recommended. The IP presents no threat indicators:

Monitor as passive traffic. No correlation with known campaigns or attack infrastructure.

---

## Intelligence Conclusion

181.197.40.112 is a legitimate Cable Onda infrastructure address in Panama with a low risk profile. No active threat indicators, blacklist presence, or malicious behavior observed. The address is currently classified as clean with no neighborhood risk inheritance. Continue standard monitoring; no defensive mitigation required at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇺🇸 United States
RegionUS-NY
CityNew York
TimezoneAmerica/New_York
Latitude8.99
Longitude-79.52

🏢 Ownership & Registration

OrganizationCable Onda
ASNAS18809
Network Name181.197.0.0 - 181.197.127.255
CIDR Block181.197.0.0/17
RIRLACNIC
CountryPA
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierEnd-User — Residential ISP endpoint
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🛡️ Public Network Snapshot

Origin ASNAS18809
Network Prefix181.197.40.0/22
Route mappingFound

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
23%
24
routing
8%
11
services
12%
22
ownership
23%
24
reputation
23%
14
geolocation
12%
22
Overall17%1017
Coverage: 3/6 dimensions · Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-07-11 02:18:09 UTC
Last Seen2026-09-05 17:28:34 UTC
Profile Built2026-09-05 17:38:11 UTC
Data FreshnessLive
Signal Types20
Total Observations29
🔍 20 signal types · 29 observations collected
This report is generated from 20+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 181.197.40.112

Who owns the IP address 181.197.40.112?

181.197.40.112 is registered to Cable Onda. The address falls within the 181.197.0.0/17 network block. Registration is held at LACNIC.

Where is 181.197.40.112 located?

Geolocation data places 181.197.40.112 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 181.197.40.112 malicious or safe?

181.197.40.112 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.

🏘️ Related IP Addresses

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.