193.189.100.204📋 Copy

IP Intelligence Briefing: 193.189.100.204

*Generated via IPDebrief Analysis*

---

**1. IP Profile**

• Risk Score: 70 (High Risk)
• Ownership:

- ASN: 41281 (KeFF NOC, RIPE)

- Geolocation: London, GB

• Threat Indicators:

- Flagged as a Tor exit node (observed in DNS records as `tor-exit-11`).

- No known abuse or spam associations.

• Network Role:

- Classified as a Tor exit node (firewalled, no services exposed).

- No cloud, CDN, or residential infrastructure detected.

---

**2. Observation History**

• Latest Observation: June 9, 2026 (confidence: 85%)

- Linked to RIPE network (KeFF NOC) with minimal operational risk.

- No persistent malicious activity or ownership changes noted.

---

**3. Relationships**

• Network Associations:

- Multiple connections to the same network `SE-KEFF-CUST` (likely internal subnet).

• DNS:

- Directly associated with `tor-exit-11` (PTR record).

- No email authentication (SPF/DKIM) or hosted domains detected.

---

**4. Neighborhood Analysis**

• Subnet: 193.189.100.0/24
• Neighbor Risk Distribution:

- 9 IPs with medium risk (59–70) and 3 with low risk (25–40).

- Subnet abuse density: 0 (clean).

• Notable Neighbors:

- IPs like 193.189.100.194, 193.189.100.196, and 193.189.100.205 show higher risk scores.

---

**5. Actionable Insights**

• Threat Context:

- The IP is a Tor exit node, which is commonly used for anonymity but can be exploited for malicious traffic (e.g., C2, exfiltration).

- Monitor for traffic patterns associated with Tor networks.

• Network Segmentation:

- Isolate traffic from this subnet to prevent potential lateral movement.

• Firewall Recommendations:

- Block outbound traffic from this IP unless explicitly required.

- Consider rate-limiting or deep packet inspection for Tor exit node traffic.

---

**6. Summary**

193.189.100.204 is a high-risk Tor exit node linked to KeFF NOC. While the subnet shows no widespread abuse, the IP’s association with Tor requires vigilance. SOC teams should investigate anomalous traffic patterns and enforce strict controls for this IP.

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.