193.176.31.197
IP Intelligence Briefing: 193.176.31.197
Date: 2026-06-12
---
**1. Core Profile**
- Risk Score: 40 (Moderate Risk)
- Ownership:
- ASN: 25369 (HYDRA-MNT / INFRAWATCH)
- Country: Netherlands (NL)
- Region: North Holland, Amsterdam
- Threat Indicators:
- No known malicious activity, blacklists, or campaigns.
- Not a Tor exit node, spam source, or known attacker.
- Network Role:
- Firewalled / No Services (no open ports, TLS, or HTTP activity).
- Assigned to infrastructure provider INFRAWATCH.
---
**2. Observation History**
- Recent Signals (2026-06-12):
- Geolocation inferred with 40% confidence (Amsterdam, NL).
- DNS records linked to infrawat.ch (SPF/DMARC configured).
- BGP prefix: 193.176.31.0/24 (INFRAWATCH).
- No persistent threats or abuse confidence scores.
---
**3. Relationships**
- Network Associations:
- Linked to INFRAWATCH (same network).
- DNS hostname: 193-176-31-197.infrawat.ch.
- Subnet:
- Part of 193.176.31.0/24 (10 total IPs).
---
**4. Neighborhood Analysis**
- Subnet Abuse Density: 0.27 (27% of IPs in subnet flagged).
- Neighbor Risk Scores:
- 3 IPs at 65+ risk (e.g., 193.176.31.216).
- 9 IPs at 40–55 risk.
- 1 IP at 0 risk (193.176.31.201).
- Actionable Insight: Monitor high-risk neighbors (e.g., 193.176.31.216) for potential lateral movement or network compromise.
---
**5. Recommendations**
1. Monitor Subnet: Track high-risk neighbors for suspicious activity.
2. Verify DNS: Confirm legitimacy of infrawat.ch and ensure SPF/DMArc alignment.
3. Network Segmentation: Consider isolating this IP due to its firewalled state and mixed subnet risk.
4. Threat Hunting: Correlate with other IPs in the 193.176.31.0/24 subnet for potential clusters.
Note: No immediate action required for 193.176.31.197 itself, but proactive monitoring of its subnet is advised.
---
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | HYDRA-MNT |
| ASN | AS25369 |
| Network Name | INFRAWATCH |
| CIDR Block | 193.176.31.192/26 |
| RIR | RIPE |
| Country | NL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 193-176-31-197.infrawat.ch |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 193-176-31-197.infrawat.ch |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 27% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 6% | 3 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-03 06:16:09 UTC |
| Last Seen | 2026-06-12 19:52:56 UTC |
| Profile Built | 2026-06-12 20:03:50 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.