193.56.116.5📋 Copy

## IP INTELLIGENCE BRIEFING: 193.56.116.5/32

Classification: LOW RISK

Date of Analysis: 2026-07-22

Status: Cleared for standard operation

---

EXECUTIVE SUMMARY

IP address 193.56.116.5 presents a low-risk profile (Risk Score: 25/100) with no active threat indicators. The IP is associated with VPN Consumer infrastructure, located in Atlanta, Georgia, United States. No malicious activity, open ports, or threat campaign associations were detected during observation.

---

OWNERSHIP & NETWORK CLASSIFICATION

Network Role: Infrastructure detected as firewalled with no active services. Connection type and infrastructure purpose classified as non-residential, non-cloud, and non-CDN.

---

THREAT ASSESSMENT

DNSBL Status: Listed on 1 of 8 available DNSBL providers (minimal operator score: 0.1304).

Control Plane: Route changes detected (0 over 30-day period). Route stability marked as false, but no significant route flapping observed.

---

OBSERVATION HISTORY

A total of 12 signal observations recorded. Key temporal indicators:

• Most Recent Signal: 2026-07-22T11:27:02 UTC
• Geolocation Signals: Multiple consistent US-based geolocation readings with confidence scores between 0.28 and 0.90
• Ownership Signals: No ownership changes detected (0 changes), average ownership duration not applicable
• Threat Persistence: 0 days of persistent malicious activity
• Classification: IP not flagged as persistently malicious

No evidence of evolving threat behavior or increasing risk trajectory over the observation window.

---

SUBNET ANALYSIS (193.56.116.0/24)

Neighborhood Profile:

• Total Siblings: 43
• Active Siblings: 1
• Threat Siblings: 2
• Abuse Density: 0.0465
• Classification: Clean

Risk Distribution Across Subnet:

• High Risk: 0 IPs
• Medium Risk: 1 IP
• Low Risk: 41 IPs

Notable Neighbors (Risk Score ≥ 60):

• 193.56.116.95: Risk Score 60 (Authority Score 50)

The subnet exhibits minimal abuse density with the majority of siblings classified as low risk. Only 2 threat siblings detected within the /24 block.

---

RELATIONSHIP MAPPING

Four relationship entities identified, all categorized as "Same Network":

• Target: VPN-CONSUMER-ATLANTA-US-193-56-116-0 (network)
• Target Type: network
• Connection Type: Same Network

No organizational or certificate relationships detected beyond the parent network namespace.

---

SERVICES & PORTS

• Open Ports: None detected
• TLS Certificate: Not applicable
• HTTP Banner: No response
• Service Purpose: Firewalled / No Services

The IP address presents no active service footprint, indicating either defensive configuration, headless infrastructure, or complete service shutdown.

---

RECOMMENDATIONS

For SOC Analysts:

1. No Immediate Action Required: IP 193.56.116.5 demonstrates low-risk characteristics with no active threat indicators

2. Monitoring: Continue standard traffic monitoring; no firewall rules required based on current risk profile

3. Subnet Context: Monitor 193.56.116.95 (Risk Score 60) as the only high-risk neighbor within the subnet

4. DNSBL Awareness: Investigate the single DNSBL listing if traffic patterns suggest potential misuse

Firewall Rules: None recommended. Standard allow policies apply.

---

CONFIDENCE LEVEL

Data Sources: Multi-signal inference, geolocation databases, network registry data, DNSBL feeds

Confidence: High (based on consistent signal patterns and clean neighborhood metrics)

Last Updated: 2026-07-22

Status: CLEAR FOR STANDARD OPERATION

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.