# 194.44.140.122 — IP Intelligence Summary

194.44.140.122 is an IPv4 address operated by AS3255-MNT (AS3255), geolocated to Lviv, Ukraine. As of October 1, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/194.44.140.122
- Last updated: 2026-10-01

## Ownership

- Organization: AS3255-MNT
- Network name: UARNET-RADIOSERVICE-WIFI-20050629
- Allocated block: 194.44.140.0/24
- ASN: AS3255 (https://ipdebrief.com/asn/3255)
- Regional registry: RIPE

## Location

- City: Lviv
- Region: Lviv
- Country: Ukraine
- Time zone: Europe/Kyiv

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (80/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 194.44.140.122

\## Executive Summary

IP address 194.44.140.122 is classified as **High Risk** with a risk score of 70/100. The address belongs to Ukrainian telecommunications infrastructure (AS3255, UARNET-RADIOSERVICE-WIFI-20050629) and is associated with minimal operator-level risk. Despite the elevated risk classification, no active threat indicators, known campaigns, or malicious behavior were detected in the profile.

\---

\## Technical Profile

\### Network Classification

\- **ASN:** 3255 (UARNET-RADIOSERVICE-WIFI-20050629)

\- **Organization:** AS3255-MNT

\- **CIDR Block:** 194.44.140.0/24

\- **RIR:** RIPE

\- **Location:** Lviv, Ukraine (UA)

\- **Network Role:** Firewalled / No Services Detected

\### Threat Indicators

\- **Blacklist Count:** 0

\- **Abuse Confidence Score:** Not available

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Known Campaigns:** None identified

\### DNS & Reputation

\- **DNSBL Listings:** 4 of 8 total lists

\- **PTR Hostnames:** None detected

\- **Forward Resolution:** Not confirmed

\- **Domain Associations:** None

\---

\## Neighborhood Analysis (194.44.140.0/24)

The /24 subnet exhibits mixed risk characteristics:

| Metric | Value |

|--------|-------|

| **Total Siblings** | 141 |

| **Active Siblings** | 69 |

| **Threat Siblings** | 13 |

| **Abuse Density** | 9.22% |

| **Classification** | Mostly Clean |

**Risk Distribution in Subnet:**

\- High Risk: 11 IPs

\- Medium Risk: 77 IPs

\- Low Risk: 12 IPs

Notable high-risk neighbors include 194.44.140.8 (risk score 70) and 194.44.140.3 (risk score 55).

\---

\## Historical Observations

Fourteen signals have been recorded for this IP. Key historical patterns:

\- **Ownership Changes:** 0 (stable ownership)

\- **Threat Persistence:** 0 days

\- **Observation Timeline:** Recent activity concentrated around July 2026

\- **Signal Consistency:** Geolocation and ownership signals remain consistent with minimal variation

No evidence of escalating threat behavior or persistent malicious activity over the observation window.

\---

\## Relationships

The IP maintains a single relationship:

\- **Type:** Same Network

\- **Target:** UARNET-RADIOSERVICE-WIFI-20050629

No additional links to related hostnames, organizations, or certificates were identified.

\---

\## Recommended Actions

Based on the risk profile (70/100), the following actions are recommended:

\### Monitoring

\- Increase logging verbosity for traffic from this IP

\- Review recent activity patterns for anomalies

\- Monitor for changes in behavior or service patterns

\### Firewall Rules (Recommended)

| Platform | Rule |

|----------|------|

| **iptables** | \`iptables -A INPUT -s 194.44.140.122 -j DROP\` |

| **nftables** | \`nft add rule inet filter input ip saddr 194.44.140.122 drop\` |

| **nginx** | \`deny 194.44.140.122;\` |

| **pfSense** | \`194.44.140.122/32\` |

| **Cloudflare WAF** | Block IP with expression: \`ip.src eq 194.44.140.122\` |

| **AWS WAF** | Add address \`194.44.140.122/32\` with description "IPDebrief risk 70" |

\---

\## Analysis Notes

While the risk score of 70 suggests elevated concern, the absence of active threat indicators, known campaigns, or malicious DNS listings indicates this IP may be flagged based on network-level patterns or historical context rather than confirmed malicious activity. The subnet's abuse density (9.22%) suggests the IP may be associated with infrastructure that has been previously abused.

**Recommended Approach:** Implement monitoring and review recent traffic patterns before permanent blocking. Consider subnet-level filtering if broader abuse patterns are observed across the 194.44.140.0/24 block.

## Nearby addresses

- 194.44.140.0 (https://ipdebrief.com/194.44.140.0)
- 194.44.140.2 (https://ipdebrief.com/194.44.140.2)
- 194.44.140.3 (https://ipdebrief.com/194.44.140.3)
- 194.44.140.5 (https://ipdebrief.com/194.44.140.5)
- 194.44.140.6 (https://ipdebrief.com/194.44.140.6)
- 194.44.140.8 (https://ipdebrief.com/194.44.140.8)
- 194.44.140.9 (https://ipdebrief.com/194.44.140.9)
- 194.44.140.10 (https://ipdebrief.com/194.44.140.10)
- 194.44.140.11 (https://ipdebrief.com/194.44.140.11)
- 194.44.140.12 (https://ipdebrief.com/194.44.140.12)
- 194.44.140.13 (https://ipdebrief.com/194.44.140.13)
- 194.44.140.14 (https://ipdebrief.com/194.44.140.14)

---

Source: IPDebrief, "194.44.140.122 IP intelligence", https://ipdebrief.com/194.44.140.122, updated 2026-10-01. Assessments are probabilistic.