194.62.214.227
## IP Threat Intelligence Briefing: 194.62.214.227
Classification: HIGH RISK / TOR EXIT NODE
Intel Summary:
IP 194.62.214.227 operates as a Tor exit node with a risk score of 70/100. The address is registered under ASN 328867 (org: June Hu / HK-IPV4SUPERHUB-20191028) in the RIPE registry. Geolocation reports Hong Kong, but RTT validation indicates geographic inconsistencies (reported 9,013.9km from probe location with 105ms RTT vs. minimum expected 180.3ms).
Technical Profile:
- Network Role: Tor Exit Node / Web Server (nginx)
- Open Ports: 80/tcp (HTTP), 443/tcp (HTTPS), 8080/tcp (HTTP-alt)
- TLS Certificate: Subject: CN=www.c6kszf4fb.net, Issuer: CN=www.hlolvvv6dgwte.com (suspicious certificate chain)
- DNS: No PTR records, no forward resolution
- Blacklist Status: Listed on 1 blacklist, 8 DNSBL lists
- BGP Route: AS2914 → AS328867 (2 hops, route changes: 2 in 30 days)
Threat Indicators:
- Tor Exit Node: Confirmed (isTor: true)
- Abuse Confidence: High risk reputation with 1 blacklisting entry
- Operator Score: 0.3043 (Basic)
- Route Stability: Unstable (2 route changes in 30 days)
Neighborhood Context:
Subnet 194.62.214.0/24 shows minimal abuse density with 1 sibling IP (194.62.214.228) also rated High Risk (70). Neighborhood classification: mostly_clean.
Historical Activity:
37 observations recorded. Route origin validated by local VRP. ASN allocated from AfriNIC (country: MA) on 2021-06-08 (1893 days old).
Recommended Actions:
- Block inbound traffic on ports 80, 443, and 8080 to Tor exit nodes
- Implement egress filtering for outbound connections to 194.62.214.0/23
- Monitor for C2 beaconing patterns originating from this subnet
- Consider geo-blocking based on Tor exit node classification
Assessment:
This IP functions as a Tor exit node with elevated risk characteristics. While not directly associated with known malicious campaigns, Tor exit nodes are commonly exploited for anonymized attacks, spam, and credential harvesting. The certificate chain anomalies and geographic inconsistencies warrant continued monitoring.
---
*Intelligence generated via IPDebrief platform for authorized defensive security operations.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | June Hu |
| ASN | AS328867 |
| Network Name | HK-IPV4SUPERHUB-20191028 |
| CIDR Block | 194.62.214.0/23 |
| RIR | RIPE |
| Country | HK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 2 — Moderate operator sophistication with routing hygiene |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 8080 | http-alt | tcp | — |
| Closed Ports | 22, 25, 80, 443, 3389, 8443 (1 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS328867 |
| Network Prefix | 194.62.214.0/24 |
| Route mapping | Found |
| RPKI Status | Valid |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 61% | 2 | 26 |
| routing | 51% | 4 | 5 |
| services | 38% | 2 | 3 |
| ownership | 46% | 3 | 6 |
| reputation | 32% | 1 | 3 |
| geolocation | 32% | 2 | 3 |
| Overall | 43% | 14 | 46 |
| Data Coherence | Mixed Signals (60%) — 2 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: US, HK
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-06 18:16:39 UTC |
| Last Seen | 2026-08-26 23:15:23 UTC |
| Profile Built | 2026-08-29 07:06:45 UTC |
| Data Freshness | Live |
| Signal Types | 29 |
| Total Observations | 32 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 194.62.214.227
Who owns the IP address 194.62.214.227?
194.62.214.227 is registered to June Hu. The address falls within the 194.62.214.0/23 network block. Registration is held at RIPE.
Where is 194.62.214.227 located?
Geolocation data places 194.62.214.227 in Hong Kong, HK, Hong Kong. The local time zone is Asia/Hong_Kong. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 194.62.214.227 malicious or safe?
194.62.214.227 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 194.62.214.227?
Responsive ports observed on 194.62.214.227 include 8080. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.