193.183.95.187📋 Copy

# IP Intelligence Briefing: 193.183.95.187/32

Classification: Low Risk / Clean

Date: Current

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 193.183.95.187/32 presents a low-risk profile with no observable malicious activity. The address shows no threat indicators, blacklist listings, or active services. Geographic signals indicate Sweden (SE) with moderate confidence, though data coverage is limited. No relationships or subnet-wide abuse patterns were detected.

---

## Technical Profile

Risk Assessment

• Risk Score: 0/100 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Stability: Stable (no ownership changes detected)
• Classification: Firewalled / No Services

Network Characteristics

• Services: No open ports detected
• TLS/Certificates: None
• DNS: No forward resolution; PTR record absent
• Email Auth: SPF/DMARC not configured
• Control Plane: BGP routing stable; no MOAS designation

Geographic Attribution

• Country: Sweden (SE)
• Coordinates: ~59.32°N, 18.06°E (MaxMind GeoLite2)
• Confidence: Moderate (0.70)
• Alternative Signal: 60.13°N, 18.64°E (0.35 confidence)
• Note: GeoPlausible validation failed; multiple geolocation sources show variance

Network Path

• Hop Count: 13
• First Hop RTT: 0.3ms
• Last Hop RTT: 120.4ms
• Transit Network: Comcast
• Timed Out Hops: 3

---

## Threat Intelligence

Threat Indicators

• Blacklist Count: 0
• Abuse Confidence Score: Not applicable (no data)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Correlation: None

Historical Observations

• Total Signals: 10
• Observation Period: Recent monitoring window
• Threat Persistence: 0 days
• Is Persistently Malicious: No

Recent signals include:

• Traceroute path analysis (13 hops, reached target)
• Multiple geolocation probes with varying confidence levels
• DNS registration signals (no active domains)
• Registration/authority scores (0.13–0.70 range)

---

## Neighborhood Analysis

• Subnet: 193.183.95.0/24
• Abuse Density: 0%
• Active Siblings: 0
• Threat Siblings: 0
• Risk Distribution: All categories at 0

No neighboring IPs in the /24 subnet show elevated risk. The subnet appears clean with no inherited threat patterns.

---

## Relationships Graph

• Linked Entities: 0
• Associated Hostnames: None
• Related Organizations: None
• Certificates: None

No relationship graph data available. This IP exists in isolation with no observable associations to other network entities.

---

## Recommended Actions

No automatic actions recommended at this time. The IP address shows no immediate threat indicators. If this IP appears in a security event context, recommend:

1. Monitor: Continue passive observation given low-risk profile

2. Contextual Review: If associated with an alert, evaluate in context of other indicators

3. No Block Required: Current profile does not warrant blocking or rate-limiting

---

## Intelligence Gaps & Notes

• Limited Data: Provider, organization, and geolocation data unavailable
• No Services: Absence of open ports may indicate firewalling or dormancy
• Single Observation: Limited historical data points constrain trend analysis
• Low Confidence: Some geolocation signals at 0.30–0.35 confidence

---

Conclusion: IP 193.183.95.187/32 presents no observable threat. The address is firewalled with no active services or malicious indicators. Treat as benign unless associated with additional contextual evidence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.