IPDebrief

188.161.115.27

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 188.161.115.27/32

Classification: Moderate Risk | Risk Score: 40/100 | Status: Active

---

## EXECUTIVE SUMMARY

IP 188.161.115.27 is a residential DSL connection from Palestine (PS) operating under PALTEL infrastructure (ASN 12975). The address shows moderate risk indicators with DNSBL listings but no active threat indicators or open services. No open ports detected; connection appears firewalled.

---

## OWNERSHIP AND INFRASTRUCTURE

FieldValue
**Organization**PALTEL-MNT
**Network Name**PALTEL-DSL
**ASN**12975
**CIDR Block**188.161.112.0/22
**RIR**Ripe
**Network Role**Firewalled / No Services

---

## GEOLOCATION

FieldValue
**Country**Palestine (PS)
**Region**Ramallah and al-Bireh Governorate
**City**Ramallah
**Coordinates**31.9°N, 35.2°E
**Geo Validation**Plausible

---

## THREAT INDICATORS

IndicatorStatus
**Abuse Confidence**Listed on 8 DNSBLs (2 total listings, high severity)
**Tor Exit Node**No
**Known Attacker**No
**Spam Source**No
**Blacklist Count**0
**Known Campaigns**None identified

DNS Reputation: Listed on 2 DNSBLs with maximum severity rated "high"

---

## NETWORK BEHAVIOR

SignalObservation
**Open Ports**None detected
**TLS Certificate**None
**HTTP Title**None
**DNS Resolution**ADSL-Dynamic.furrera.ps
**PTR Hostname**ADSL-Dynamic.furrera.ps
**DNSSEC Valid**Yes
**Forward Resolution Confirmed**No
**Email Auth**SPF: Yes, DMARC: Yes

---

## OBSERVATION HISTORY (14 Observations)

Recent activity shows consistent geolocation signals from Ramallah, PS with 70-90% confidence. DNS records validated for furrera.ps domain. No ownership changes or threat persistence observed.

---

## NETWORK RELATIONSHIPS

TypeTarget
Same NetworkPALTEL-DSL
DNS AssociationADSL-Dynamic.furrera.ps

---

## NEIGHBORHOOD ANALYSIS (188.161.115.0/24)

MetricValue
**Subnet Abuse Density**0
**Total Siblings**0
**Active Siblings**0
**Threat Siblings**0
**Classification**None

---

## TRACEROUTE ANALYSIS

MetricValue
**Hop Count**30
**First Hop RTT**0.2ms
**Last Hop RTT**106.5ms
**Timed Out Hops**22
**Transit Network**Comcast

---

## RECOMMENDED ACTIONS

Recommended Action: Monitor/Block

Firewall rules available for multiple platforms:

PlatformRule
**iptables**`iptables -A INPUT -s 188.161.115.27 -j DROP`
**nftables**`nft add rule inet filter input ip saddr 188.161.115.27 drop`
**nginx**`deny 188.161.115.27;`
**pfSense**`188.161.115.27/32`
**Cloudflare WAF**Block (expression: `ip.src eq 188.161.115.27`)
**AWS WAF**`Addresses: ["188.161.115.27/32"]`

---

## ANALYST NOTES

The IP exhibits moderate risk (score 40) primarily due to DNSBL listings. However, no active threat indicators or open services were detected. The connection appears to be a residential DSL endpoint with firewall protections enabled. DNSBL presence suggests past reputation issues or association with compromised endpoints. Monitor for changes in threat indicators or service exposure.

---

Briefing Generated: IPDebrief Intelligence Platform

Data Sources: IPDebrief, RIR registries, DNSBL feeds, geolocation databases

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇵🇸 PS
RegionRamallah and al-Bireh Governorate
CityRamallah
Timezone—
Latitude31.90
Longitude35.20

🏢 Ownership & Registration

OrganizationPALTEL-MNT
ASNAS12975
Network NamePALTEL-DSL
CIDR Block188.161.112.0/22
RIRRIPE
CountryPS
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRADSL-Dynamic.furrera.ps
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)
Forward HostnamesADSL-Dynamic.furrera.ps

🔐 DNS Hygiene

Hygiene Score60% (Good)
SPFPresent
DMARCPresent
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown — Insufficient routing data to classify
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
0%
00
routing
0%
00
services
0%
00
ownership
25%
12
reputation
0%
00
geolocation
0%
00
Overall4%12
Coverage: 1/6 dimensions · Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-07-21 19:03:09 UTC
Last Seen2026-07-29 10:27:33 UTC
Profile Built2026-07-29 10:32:56 UTC
Data FreshnessLive
Signal Types17
Total Observations17
🔍 17 signal types · 17 observations collected
This report is generated from 17+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.