211.240.117.40
IP Intelligence Briefing: 211.240.117.40
Date: 2026-06-09
---
**1. Core Profile**
- Risk Score: 65 (Moderate Risk)
- Ownership:
- ASN: 4663 (IP Manager)
- Organization: ELIMNET-KR (APNIC registered)
- Geolocation: United States (New York)
- Threat Indicators:
- No active malware, spam, or attacker associations.
- Listed in 2 DNSBLs (out of 8 total) with "Minimal" risk rating.
- Network Role:
- No open ports/services detected.
- Firewalled / No Services (no TLS, HTTP, or banner data).
---
**2. Observation History**
- Recent Activity (30 Days):
- DNSBL Listings: 2 entries (high severity).
- Operator Score: 0.13 (Minimal risk).
- Stability: No route changes; stable ASN (4663).
- Trends:
- No persistent malicious activity or campaign correlations.
- DNSSEC validation enabled, but no CAA records.
---
**3. Relationships**
- Linked Entities:
- Network: ELIMNET-KR (same /17 subnet).
- No Hostnames/Certificates: No DNS or TLS associations.
- No Email Auth: No SPF/DKIM records.
---
**4. Neighborhood Analysis**
- Subnet: 211.240.117.40/24 (no active neighbors reported).
- Abuse Density: 0% (no malicious siblings).
- Notes: Isolated IP with no neighboring IPs detected.
---
**5. Recommendations**
- Monitoring: Track DNSBL reappearances or new service openings.
- Firewall: Consider blocking DNSBL-listed IPs (e.g., Spamhaus, OpenBL).
- Investigation: Verify ELIMNET-KR's legitimacy; confirm no spoofing or misconfigured services.
Conclusion: Low-to-moderate risk with no active threats. Monitor for unexpected changes in DNS or network behavior.
---
*Generated via IPDebrief intelligence tools. All data sourced from public records and threat feeds.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IP Manager |
| ASN | AS4663 |
| Network Name | ELIMNET-KR |
| CIDR Block | 211.240.0.0/17 |
| RIR | APNIC |
| Country | KR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Apache/2.4.41 (Ubuntu) |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2023-08-25T22:59:44+00:00 |
| Valid Until | 2043-08-20T22:59:44+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 7300 days |
| Serial Number | 0DCB39B1A8026187FFC75B393EF3825424C5C2D9 |
| Thumbprint | 0DCC7C82F5C62CB3B266A8C7C9F9D9ACAC0C2AC2 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 1 | 1 |
| routing | 17% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 30% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 17% | 1 | 1 |
| Overall | 16% | 6 | 7 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims AU but primary geo says KR
📅 Observation Timeline 🔄 Fresh
| First Seen | 2026-05-21 21:00:15 UTC |
| Last Seen | 2026-06-19 11:33:52 UTC |
| Profile Built | 2026-06-17 15:10:17 UTC |
| Data Freshness | Fresh |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.