194.182.200.208
INTELLIGENCE BRIEFING: IP 194.182.200.208
Classification: LOW RISK / MONITOR
Date: 2026-07-28
Analyst: IPDebrief Intelligence Team
---
EXECUTIVE SUMMARY
IP 194.182.200.208 is a German residential/enterprise endpoint with a low-risk profile (Risk Score: 25). The address is associated with WEMACOM telecommunications infrastructure in Mecklenburg-Vorpommern, Germany. No active services or open ports were detected, and the IP is firewalled. While DNSBL listings indicate some reputation concerns, overall threat indicators are minimal.
---
NETWORK IDENTIFICATION
- ASN: AS51978 (WEMACOM Telekommunikation GmbH)
- Organization: DE-WEMACOM
- CIDR Block: 194.182.200.0/22
- RIR: RIPE
- Geolocation: Grevesmühlen, Mecklenburg-Vorpommern, Germany (51.17°N, 10.45°E)
- Network Role: Firewalled / No Services
- Classification: Non-cloud, Non-CDN, Non-VPN, Non-Proxy
---
THREAT ASSESSMENT
Risk Score: 25/100 (LOW)
Abuse Confidence Score: Not available
Blacklist Status: Listed on 1 of 8 DNSBL feeds (1 listing with high severity)
Known Threats: No active attack campaigns detected
Tor Exit Node: No
Known Attacker: No
Threat Indicators:
- Single historical observation flagged with threat indicators (Pulse Count: 1)
- No persistent malicious behavior detected
- No open ports or services exposed
- No certificate or hostname associations
---
NEIGHBORHOOD ANALYSIS (194.182.200.0/24)
- Subnet Abuse Density: 0/100 (LOW)
- Total Sibling IPs: 4
- Risk Distribution: 4 Low Risk, 0 Medium, 0 High
- Neighboring IPs:
- 194.182.200.203: Risk 0 (Low)
- 194.182.200.91: Risk 0 (Low)
- 194.182.200.225: Risk 0 (Low)
- 194.182.200.72: Risk 25 (Low)
The /24 subnet shows no cluster effects or coordinated abuse patterns.
---
OBSERVATION HISTORY
Total Observations: 15 signals
Latest Activity: 2026-07-28 22:09 UTC
Key Historical Signals:
- Geolocation confirmed as Germany with multi-source consensus
- One threat pulse observed (source: Alienvault OTX)
- DNSBL listings recorded (8 total lists, 1 high-severity)
- Network routing stable through Comcast and NTT transit
- No ownership changes detected
---
RECOMMENDED ACTIONS
Firewall Policy: Monitor / Log
- No immediate blocking recommended given low risk score
- Log connection attempts for baseline traffic profiling
- Apply standard residential/ISP firewall rules
Detection Rules:
- No specific IOC-based rules required
- Monitor for service enumeration attempts
- Watch for outbound connection anomalies
---
INTELLIGENCE NOTES
This IP represents typical German ISP infrastructure with no elevated threat indicators. The single DNSBL listing warrants awareness but does not constitute a blocking justification. The IP's residential/enterprise classification and firewalled status suggest legitimate end-user traffic. Continue passive monitoring; no immediate defensive action required.
---
Source: IPDebrief Intelligence Platform
Confidence: HIGH (Multi-source geolocation, 15 observations)
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | MNT-WEMACOM |
| ASN | AS51978 |
| Network Name | DE-WEMACOM |
| CIDR Block | 194.182.200.0/22 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS51978 |
| Network Prefix | 194.182.192.0/19 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-19 18:09:35 UTC |
| Last Seen | 2026-09-03 01:17:39 UTC |
| Profile Built | 2026-09-03 01:21:28 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 194.182.200.208
Who owns the IP address 194.182.200.208?
194.182.200.208 is registered to MNT-WEMACOM. The address falls within the 194.182.200.0/22 network block. Registration is held at RIPE.
Where is 194.182.200.208 located?
Geolocation data places 194.182.200.208 in Grevesmühlen, Mecklenburg-Vorpommern, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 194.182.200.208 malicious or safe?
194.182.200.208 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.