# 194.44.140.187 — IP Intelligence Summary

194.44.140.187 is an IPv4 address operated by AS3255-MNT (AS3255), geolocated to Lviv, Ukraine. As of October 7, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/194.44.140.187
- Last updated: 2026-10-07

## Ownership

- Organization: AS3255-MNT
- Network name: UARNET-RADIOSERVICE-WIFI-20050629
- Allocated block: 194.44.140.0/24
- ASN: AS3255 (https://ipdebrief.com/asn/3255)
- Regional registry: RIPE

## Location

- City: Lviv
- Region: Lviv
- Country: Ukraine
- Time zone: Europe/Kyiv

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (55/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP Intelligence Briefing: 194.44.140.187

**Classification: High Risk (Score: 70/100)**

\### Summary

The IP address 194.44.140.187 is associated with ASN 3255 (UARNET-RADIOSERVICE-WIFI-20050629) and is currently classified as High Risk. The IP shows geolocation inconsistencies between reported Polish (Lviv/Warsaw) and Ukrainian origins, with recent signals favoring Ukraine. Listed on 4 of 8 DNSBLs with high-severity ratings.

\### Ownership and Infrastructure

\- **ASN:** 3255 (UARNET-AS - LLC EKSINTECH, UA)

\- **CIDR Block:** 194.44.140.0/24

\- **Registration:** Allocated 1994-02-17 (RIPE)

\- **Network Status:** Firewalled / No Services Detected

\- **DNS Status:** No PTR records, no forward resolution confirmed

\### Threat Indicators

\- **Risk Score:** 70/100 (High)

\- **DNSBL Listings:** 4/8 total lists flagged

\- **Control Plane:** Route stability flagged as false; RPKI state unavailable

\- **Known Campaigns:** None correlated

\- **Tor Exit/Proxy:** Not identified

\### Neighborhood Analysis (194.44.140.0/24)

\- **Abuse Density:** 0.11 (11%)

\- **Total Siblings:** 144

\- **Active Siblings:** 70

\- **Threat Siblings:** 13

\- **Risk Distribution:** 11 high-risk, 79 medium-risk, 10 low-risk IPs

Recent high-risk neighbors include 194.44.140.0 (55), 194.44.140.3 (55), and 194.44.140.5 (40).

\### Behavioral Timeline

\- **Observation Count:** 13 signals recorded

\- **Last Observed:** 2026-07-24

\- **Geographic Consensus:** Inconsistent (PL vs UA)

\- **DNSSEC:** Valid

\- **Threat Persistence:** Not persistently malicious

\### Recommended Actions

1. **Block Traffic:** Apply firewall rules across perimeter defenses

2. **Increase Logging:** Monitor for lateral movement from this IP or subnet

3. **Review Subnet Activity:** Consider broader blocking of 194.44.140.0/24 given 11% abuse density and 13 threat siblings

**Firewall Rule Example (iptables):**

\`\`\`

iptables -A INPUT -s 194.44.140.187 -j DROP

\`\`\`

**Recommended for:** SOC monitoring, perimeter blocking, and threat hunting correlation with associated subnet IPs.

## Nearby addresses

- 194.44.140.0 (https://ipdebrief.com/194.44.140.0)
- 194.44.140.2 (https://ipdebrief.com/194.44.140.2)
- 194.44.140.3 (https://ipdebrief.com/194.44.140.3)
- 194.44.140.5 (https://ipdebrief.com/194.44.140.5)
- 194.44.140.6 (https://ipdebrief.com/194.44.140.6)
- 194.44.140.8 (https://ipdebrief.com/194.44.140.8)
- 194.44.140.9 (https://ipdebrief.com/194.44.140.9)
- 194.44.140.10 (https://ipdebrief.com/194.44.140.10)
- 194.44.140.11 (https://ipdebrief.com/194.44.140.11)
- 194.44.140.12 (https://ipdebrief.com/194.44.140.12)
- 194.44.140.13 (https://ipdebrief.com/194.44.140.13)
- 194.44.140.14 (https://ipdebrief.com/194.44.140.14)

---

Source: IPDebrief, "194.44.140.187 IP intelligence", https://ipdebrief.com/194.44.140.187, updated 2026-10-07. Assessments are probabilistic.