INTELLIGENCE BRIEFING: 193.142.219.217/32
---
**SUMMARY ASSESSMENT**
The target IP address 193.142.219.217 is classified as Low Risk (Risk Score: 25) with no active threat indicators. The IP is part of Ukrainian network infrastructure operated by KEFI-MNT/IRNET (ASN: 42641). No malicious activity, blacklist entries, or known campaign associations were detected.
---
**NETWORK OWNERSHIP & GEOLLOCATION**
- Organization: KEFI-MNT / IRNET
- ASN: 42641
- Country: Ukraine (UA)
- City: 4/4 Narodna sq.
- CIDR Block: 193.142.219.0/24
- RIR: RIPE
- Registration: RIR registry assigned
---
**THREAT INDICATORS**
- Blacklist Count: 0
- Abuse Confidence: None recorded
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- DNSBL Listed: 1 of 8 total lists
---
**NETWORK ROLE & INFRASTRUCTURE**
- Service Status: Firewalled / No Services
- Open Ports: None
- Infrastructure Type: Network infrastructure
- Cloud/CDN/VPN/Proxy: Not applicable
- Mobile Carrier: No
- Residential/Hosting: No
- Bogon: No
- Anycast: No
---
**DNS & EMAIL REPUTATION**
- PTR Hostname: 217-219.ir.net.ua
- Forward Resolution: Confirmed (1 hostname)
- Domain: net.ua
- DNSSEC: Valid
- Email Auth: SPF enabled
- Forward Hostnames: 217-219.ir.net.ua
---
**NEIGHBORHOOD ANALYSIS (193.142.219.0/24)**
- Subnet Abuse Density: 0 (Clean)
- Total Siblings: 1
- Risk Distribution: 1 Low, 0 Medium, 0 High
- Notable Neighbor: 193.142.219.203 (Risk: 0, Authority: 50)
- Inherited Risk: None
---
**OBSERVATION HISTORY**
- Total Observations: 17
- Recent Activity: 2026-07-23
- Ownership Changes: 0
- Threat Persistence Days: 0
- Persistently Malicious: No
- Threat Observation Count: 0
Recent signals indicate consistent infrastructure presence with no degradation in risk posture. Geolocation confidence varies (0.30-0.95), with multi-signal inference placing the IP in Ukraine.
---
**RELATIONSHIP GRAPH**
- DNS Associations: 217-219.ir.net.ua (multiple entries)
- Network Associations: IRNET (multiple entries)
- Relationship Count: 9
- No external entity associations detected
---
**RECOMMENDED ACTIONS**
- Firewall Rules: None required (Low Risk)
- Monitoring: Standard traffic monitoring
- Block/Allow: No blocking recommended
- Discretionary: No additional actions warranted
---
**CONTROL PLANE DATA**
- Route Stability: Unstable
- Route Changes (30d): 0
- RPKI State: Not assessed
- IRR Consistency: Not assessed
- Operator Score: 0.2609 (Basic)
- MoAS: No
- Delegation Age: Not applicable
---
**SOC ANALYST NOTES**
This IP represents benign network infrastructure with no threat activity. The low risk score, absence of blacklist entries, and clean neighborhood profile indicate this is not a target for blocking. Continue standard traffic observation. No immediate action required.
Classification: LOW RISK — Monitor only
Date: Current
Source: IPDebrief Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | KEFI-MNT |
| ASN | AS42641 |
| Network Name | IRNET |
| CIDR Block | 193.142.219.0/24 |
| RIR | RIPE |
| Country | UA |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 217-219.ir.net.ua |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 217-219.ir.net.ua |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS42641 |
| Network Prefix | 193.142.219.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 20% | 2 | 3 |
| reputation | 11% | 1 | 2 |
| geolocation | 20% | 2 | 3 |
| Overall | 17% | 9 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 23:31:44 UTC |
| Last Seen | 2026-09-10 13:03:06 UTC |
| Profile Built | 2026-09-10 13:45:47 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 30 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 193.142.219.217
Who owns the IP address 193.142.219.217?
193.142.219.217 is registered to KEFI-MNT. The address falls within the 193.142.219.0/24 network block. Registration is held at RIPE.
Where is 193.142.219.217 located?
Geolocation data places 193.142.219.217 in London. The local time zone is Europe/Kyiv. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 193.142.219.217 malicious or safe?
193.142.219.217 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 193.142.219.217?
The reverse DNS (PTR) record for 193.142.219.217 is 217-219.ir.net.ua. This hostname is forward-confirmed, meaning it resolves back to the same address.