188.143.233.246📋 Copy

# IP INTELLIGENCE BRIEFING: 188.143.233.246

## EXECUTIVE SUMMARY

IP 188.143.233.246 is a moderate-risk (40/100) address assigned to Izydor Symanski (AS34665) in St Petersburg, Russia. The address resides in a high-abuse subnet (188.143.233.0/24) with 76.56% abuse density. Currently firewalled with no active services, but recommended for blocking due to neighborhood risk profile and DNSBL presence.

---

## IP OWNERSHIP & GEOLOCATION

• ASN: 34665 (PINDC-AS - Petersburg Internet Network ltd., RU)
• Organization: Izydor Symanski
• Network: 188.143.232.0/23
• Location: St Petersburg, Russia (RU)
• Registration: RIR RIPE

## NETWORK CLASSIFICATION

• Reputation: Moderate Risk
• Risk Score: 40/100
• Provider Score: 0/100
• Authority Score: 0/100
• Service Status: Firewalled / No Services
• DNSBL Listed: 1 of 8 lists
• Not: Tor Exit, VPN, Proxy, CDN, Cloud, Hosting, Mobile, Residential

## SUBNET RISK PROFILE (188.143.233.0/24)

• Abuse Density: 0.7656 (76.56%)
• Classification: HIGH ABUSE
• Inherited Risk: 30/100
• Active Siblings: 87/256
• Threat Siblings: 196
• Neighbor Risk Distribution: 98 low-risk, 2 medium-risk, 0 high-risk

## THREAT INDICATORS

• No active threat indicators detected
• Not identified as known attacker or spam source
• No Tor exit node activity
• No known campaign associations
• No open ports or TLS certificates observed

## OBSERVATION HISTORY

• Total Signals: 15 observations
• Recent ASN Confirmation: 2026-06-03 (ASN 34665, prefix 188.143.232.0/23)
• High Abuse Classification: Confirmed in historical data
• Ownership Stability: No ownership changes recorded
• Threat Persistence: 0 days

## RECOMMENDED SECURITY ACTIONS

Firewall Rules

```

iptables: iptables -A INPUT -s 188.143.233.246 -j DROP

nftables: nft add rule inet filter input ip saddr 188.143.233.246 drop

```

Web Application Firewalls

• nginx: `deny 188.143.233.246;`
• Cloudflare WAF: Block IP (risk score 40)
• AWS WAF: Add address 188.143.233.246/32

---

## ANALYST NOTES

The IP exhibits moderate individual risk but inherits significant risk from its /24 neighborhood. The 76.56% abuse density of subnet 188.143.233.0/24 indicates systemic abuse patterns. While this specific address shows no active services or threat indicators, the neighborhood context warrants defensive blocking. The address is DNSBL-listed on one feed, confirming prior abuse activity. Recommended for blocklist inclusion pending correlation with internal telemetry.

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.