188.143.232.193📋 Copy

# IP Intelligence Briefing: 188.143.232.193/32

Classification: Moderate Risk | Date: 2026-06-18 | Source: IPDebrief Intelligence Platform

## Executive Summary

IP address 188.143.232.193 is associated with Petersburg Internet Network Ltd. (ASN 34665) in St. Petersburg, Russia. The IP presents a moderate risk profile (risk score: 40) with no active threat indicators observed. However, the /24 subnet (188.143.232.0/24) exhibits elevated abuse density (0.7812) with high-abuse classification, warranting defensive monitoring.

---

## Profile & Ownership

---

## Network Classification

The IP is classified as firewalled with no active services detected. Classification flags:

• Not CDN, Cloud, VPN, Proxy, Tor, Mobile, Hosting, or Residential
• Not bogon or anycast
• Forward resolution: Unconfirmed
• No PTR hostnames recorded

---

## Threat Indicators

Current Status: No active threat indicators

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists

---

## Subnet Neighborhood Analysis

Subnet: 188.143.232.0/24

The /24 subnet demonstrates significant abuse prevalence with 200 threat-sibling IPs identified.

---

## Control Plane & Routing

---

## Temporal & Behavioral History

Observation Count: 21 signals over monitoring period

Key Historical Signals:

• 2026-06-18: ASN 34665 attribution via Team Cymru DNS (confidence: 0.85)
• 2026-06-04: Minimal operator score (0.2174)
• 2026-06-03: High abuse density classification (0.7812)
• 2026-06-03: Network role classification (confidence: 0.30)

Behavioral Metrics:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Persistently Malicious: No

---

## Relationship Graph

Total Relationships: 72

• Multiple "Same Network" relationships to LeonLundberg-net network entity
• No external organization or hostname relationships identified

---

## Recommended Actions

Firewall Blocking Rules Available:

```bash

# iptables

iptables -A INPUT -s 188.143.232.193 -j DROP

# nftables

nft add rule inet filter input ip saddr 188.143.232.193 drop

# nginx

deny 188.143.232.193;

# Cloudflare WAF

Filter: ip.src eq 188.143.232.193 (Block)

# AWS WAF

Addresses: 188.143.232.193/32

```

---

## Analyst Notes

1. Subnet Context: Despite moderate IP-level risk score, the /24 subnet shows high abuse density. Consider implementing subnet-level monitoring or blocking rules if the threat surface warrants.

2. No Active Services: The target IP is not hosting detectable services, reducing immediate exploitation risk.

3. Geographic Concentration: All intelligence originates from Russian infrastructure. Coordinate with threat intelligence feeds for regional context.

4. Monitoring Recommendation: Continue passive monitoring. No escalation required at this time, but maintain awareness of subnet-level activity patterns.

5. Action Threshold: Risk score of 40 falls within moderate category. Implement defensive controls based on organizational risk tolerance.

---

*Intelligence generated by IPDebrief Platform. This briefing is based on passive observations and should be validated through additional context before operational deployment.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.