IPDebrief

193.176.211.182

IP Intelligence Dossier
Your IP: 216.73.217.135
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 193.176.211.182/32

Classification: Moderate Risk / High Abuse Subnet

Date: 2026-06-25

---

## EXECUTIVE SUMMARY

IP address 193.176.211.182 is associated with VPN Consumer Hong Kong (ASN 206092) and operates from Hong Kong. The IP presents a moderate risk score (40/100) and is part of a subnet (193.176.211.0/24) with extremely high abuse density (0.9259). No active services are detected on the host. The IP is listed on 1 of 8 DNS blacklists and is not associated with Tor, residential, or hosting infrastructure.

---

## OWNERSHIP & INFRASTRUCTURE

FieldValue
ASN206092
OrganizationVPN Consumer Hong Kong
CountryHong Kong (HK)
Network Block193.176.211.0/24
RegistrationRIR: RIPE

The subnet classification indicates high_abuse with 75 of 81 total sibling IPs flagged as threats. Only 15 siblings remain active.

---

## THREAT INDICATORS

IndicatorStatus
Risk Score40 (Moderate)
Abuse ConfidenceNot Available
DNSBL ListedYes (1/8 lists)
Known AttackerNo
Spam SourceNo
Tor Exit NodeNo
Mobile CarrierNo
ResidentialNo
Cloud/CDN/HostingNo

No threat indicators or campaign associations detected.

---

## NETWORK BEHAVIOR

Services: Firewalled / No Services detected (no open ports)

DNS: Forward resolution not confirmed. No PTR hostnames.

Routing: Route stability is false (isRouteStable: false). Origin ASN: 206092.

Operator Score: 0.1304 (Minimal)

---

## OBSERVATION HISTORY

15 total observations recorded. Most recent signal dated 2026-06-25, showing Hong Kong geolocation with low confidence (0.28). Historical data from 2026-06-04 confirmed high_abuse subnet classification (0.9259 abuse density) and minimal operator score.

---

## RELATED ENTITIES

26 relationship records identified, all mapping to the same network: HONG-KONG-193-176-211-0.

---

## RECOMMENDED ACTIONS

Risk Level: Block at network perimeter

Firewall Rules:

Note: Consider blocking the entire /24 subnet (193.176.211.0/24) given the 0.9259 abuse density and 75 threat-sibling IPs.

---

Source: IPDebrief Intelligence Platform

Data Currency: Real-time as of 2026-06-25

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ญ๐Ÿ‡ฐ Hong Kong
RegionHK
CityHong Kong
TimezoneAsia/Hong_Kong
Latitude22.40
Longitude114.11

๐Ÿข Ownership & Registration

OrganizationVPN Consumer Hong Kong
ASNAS206092
Network Nameโ€”
CIDR Blockโ€”
RIRRIPE
Countryโ€”
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown โ€” Insufficient routing data to classify
No specific classification

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
20%
23
routing
13%
11
services
8%
11
ownership
20%
23
reputation
19%
13
geolocation
27%
22
Overall18%913
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-08 05:02:00 UTC
Last Seen2026-06-25 02:48:26 UTC
Profile Built2026-06-25 03:31:27 UTC
Data FreshnessLive
Signal Types16
Total Observations16
๐Ÿ” 16 signal types ยท 16 observations collected
This report is generated from 16+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.