# 193.56.116.5 — IP Intelligence Summary 193.56.116.5 is an IPv4 address operated by VPN Consumer Atlanta, United States of America (AS62240), geolocated to Atlanta, United States. As of October 17, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/193.56.116.5 - Last updated: 2026-10-17 ## Ownership - Organization: VPN Consumer Atlanta, United States of America - Network name: VPN-CONSUMER-ATLANTA-US-193-56-116-0 - Allocated block: 193.56.116.0/24 - ASN: AS62240 (https://ipdebrief.com/asn/62240) - Regional registry: RIPE ## Location - City: Atlanta - Region: Georgia - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \## IP INTELLIGENCE BRIEFING: 193.56.116.5/32 **Classification:** LOW RISK **Date of Analysis:** 2026-07-22 **Status:** Cleared for standard operation \--- \### EXECUTIVE SUMMARY IP address 193.56.116.5 presents a low-risk profile (Risk Score: 25/100) with no active threat indicators. The IP is associated with VPN Consumer infrastructure, located in Atlanta, Georgia, United States. No malicious activity, open ports, or threat campaign associations were detected during observation. \--- \### OWNERSHIP & NETWORK CLASSIFICATION | Attribute | Value | |-----------|-------| | **ASN** | 62240 | | **Organization** | VPN Consumer Atlanta, United States of America | | **Netname** | VPN-CONSUMER-ATLANTA-US-193-56-116-0 | | **CIDR Block** | 193.56.116.0/24 | | **RIR** | RIPE | | **Geolocation** | Atlanta, Georgia, US (32.16°N, -82.9°W) | | **Timezone** | America/New_York | **Network Role:** Infrastructure detected as firewalled with no active services. Connection type and infrastructure purpose classified as non-residential, non-cloud, and non-CDN. \--- \### THREAT ASSESSMENT | Indicator | Status | |-----------|--------| | **Risk Score** | 25 (Low) | | **Abuse Confidence** | Not applicable | | **Blacklist Count** | 0 | | **Known Campaigns** | None | | **Tor Exit Node** | No | | **Known Attacker** | No | | **Spam Source** | No | | **Threat Persistence** | 0 days | **DNSBL Status:** Listed on 1 of 8 available DNSBL providers (minimal operator score: 0.1304). **Control Plane:** Route changes detected (0 over 30-day period). Route stability marked as false, but no significant route flapping observed. \--- \### OBSERVATION HISTORY A total of 12 signal observations recorded. Key temporal indicators: \- **Most Recent Signal:** 2026-07-22T11:27:02 UTC \- **Geolocation Signals:** Multiple consistent US-based geolocation readings with confidence scores between 0.28 and 0.90 \- **Ownership Signals:** No ownership changes detected (0 changes), average ownership duration not applicable \- **Threat Persistence:** 0 days of persistent malicious activity \- **Classification:** IP not flagged as persistently malicious No evidence of evolving threat behavior or increasing risk trajectory over the observation window. \--- \### SUBNET ANALYSIS (193.56.116.0/24) **Neighborhood Profile:** \- **Total Siblings:** 43 \- **Active Siblings:** 1 \- **Threat Siblings:** 2 \- **Abuse Density:** 0.0465 \- **Classification:** Clean **Risk Distribution Across Subnet:** \- High Risk: 0 IPs \- Medium Risk: 1 IP \- Low Risk: 41 IPs **Notable Neighbors (Risk Score ≥ 60):** \- 193.56.116.95: Risk Score 60 (Authority Score 50) The subnet exhibits minimal abuse density with the majority of siblings classified as low risk. Only 2 threat siblings detected within the /24 block. \--- \### RELATIONSHIP MAPPING Four relationship entities identified, all categorized as "Same Network": \- **Target:** VPN-CONSUMER-ATLANTA-US-193-56-116-0 (network) \- **Target Type:** network \- **Connection Type:** Same Network No organizational or certificate relationships detected beyond the parent network namespace. \--- \### SERVICES & PORTS \- **Open Ports:** None detected \- **TLS Certificate:** Not applicable \- **HTTP Banner:** No response \- **Service Purpose:** Firewalled / No Services The IP address presents no active service footprint, indicating either defensive configuration, headless infrastructure, or complete service shutdown. \--- \### RECOMMENDATIONS **For SOC Analysts:** 1. **No Immediate Action Required:** IP 193.56.116.5 demonstrates low-risk characteristics with no active threat indicators 2. **Monitoring:** Continue standard traffic monitoring; no firewall rules required based on current risk profile 3. **Subnet Context:** Monitor 193.56.116.95 (Risk Score 60) as the only high-risk neighbor within the subnet 4. **DNSBL Awareness:** Investigate the single DNSBL listing if traffic patterns suggest potential misuse **Firewall Rules:** None recommended. Standard allow policies apply. \--- \### CONFIDENCE LEVEL **Data Sources:** Multi-signal inference, geolocation databases, network registry data, DNSBL feeds **Confidence:** High (based on consistent signal patterns and clean neighborhood metrics) **Last Updated:** 2026-07-22 **Status:** CLEAR FOR STANDARD OPERATION ## Nearby addresses - 193.56.116.7 (https://ipdebrief.com/193.56.116.7) - 193.56.116.9 (https://ipdebrief.com/193.56.116.9) - 193.56.116.20 (https://ipdebrief.com/193.56.116.20) - 193.56.116.26 (https://ipdebrief.com/193.56.116.26) - 193.56.116.28 (https://ipdebrief.com/193.56.116.28) - 193.56.116.33 (https://ipdebrief.com/193.56.116.33) - 193.56.116.34 (https://ipdebrief.com/193.56.116.34) - 193.56.116.36 (https://ipdebrief.com/193.56.116.36) - 193.56.116.50 (https://ipdebrief.com/193.56.116.50) - 193.56.116.52 (https://ipdebrief.com/193.56.116.52) - 193.56.116.53 (https://ipdebrief.com/193.56.116.53) - 193.56.116.54 (https://ipdebrief.com/193.56.116.54) --- Source: IPDebrief, "193.56.116.5 IP intelligence", https://ipdebrief.com/193.56.116.5, updated 2026-10-17. Assessments are probabilistic.