186.246.53.54
Intelligence analysis identified 186.246.53.54 as a high-risk IP address with a score of 70. The endpoint was classified as a Tor exit node. Network ownership records attributed the address to Costel Savulescu under the organization name CH-BITHOSTING-20260429 (ASN 63023). Geolocation data indicated the node resided in Hong Kong, though contradictory sources placed it in Brazil. The endpoint listened on ports 22 (SSH) and 443 (HTTPS). Analysis confirmed the address was listed on one DNS blacklist. The neighborhood surrounding the subnet showed low abuse density overall, though two sibling IPs were flagged as threats. Observations spanned from August to September. A recommendation was generated to block the IP address due to critical severity associated with the Tor exit node classification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Costel Savulescu |
| ASN | AS63023 |
| Network Name | CH-BITHOSTING-20260429 |
| CIDR Block | 186.246.53.0/24 |
| RIR | LACNIC |
| Country | CH |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vm25793.bit.hosting |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | vm27767.bit.hosting |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2026-08-06T00:00:00+00:00 |
| Valid Until | 2026-10-26T23:59:59+00:00 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 6 |
| routing | 35% | 2 | 3 |
| services | 47% | 2 | 11 |
| ownership | 33% | 3 | 4 |
| reputation | 42% | 1 | 32 |
| geolocation | 41% | 2 | 5 |
| Overall | 39% | 12 | 61 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-23 17:39:44 UTC |
| Last Seen | 2026-09-22 15:45:58 UTC |
| Profile Built | 2026-09-23 18:18:45 UTC |
| Data Freshness | Live |
| Signal Types | 30 |
| Total Observations | 107 |
Full dossier details are available via our API.