213.230.76.117📋 Copy

## Intelligence Briefing: 213.230.76.117/32

Date: 2026-07-22

Classification: Moderate Risk

Source: IPDebrief Intelligence Platform

---

Executive Summary

IP address 213.230.76.117 is a telecommunication infrastructure endpoint associated with Uzbekistan's UZTELECOM network. The address presents moderate risk (score: 40) with no active threat indicators. The IP is firewalled with no open services, but exhibits geolocation inconsistencies and minor DNSBL listings.

---

Ownership & Network Context

• ASN: 8193 (UZTELECOM)
• Organization: AS8193-MNT / UZTELECOM
• CIDR Block: 213.230.76.0/24
• RIR: RIPE
• Abuse Contact: Available via RDAP

The IP belongs to UZTELECOM's infrastructure network. Ownership has remained stable with zero ownership changes recorded.

---

Geolocation Analysis

Primary Assignment: Stockholm, Sweden (SE)

Secondary Signal: Tashkent, Uzbekistan (UZ)

Status: Geoconsensus: FALSE, GeoPlausible: FALSE

Geolocation signals diverge between two sources, with conflicting country assignments (Sweden vs. Uzbekistan). This inconsistency requires monitoring, particularly for traffic correlation.

---

Threat Assessment

• Risk Score: 40 (Moderate)
• Blacklist Status: Listed on 2 of 8 DNSBL lists
• Max Severity: High
• Tor Exit: No
• Known Attacker: No
• Spam Source: No
• Campaign Matches: 0
• Threat Persistence: 0 days

The IP has been observed on 8 DNSBLs with 2 current listings. Maximum severity rating is "high" but the IP is not classified as a known attacker or spam source.

---

Network Services

• Open Ports: None detected
• Service Classification: Firewalled / No Services
• TLS Certificate: Not detected
• HTTP Services: Not detected

The address appears to be a backend or control plane endpoint with no publicly accessible services.

---

DNS Analysis

• PTR Hostname: 117.64.uzpak.uz
• Forward Resolved: 117.64.uzpak.uz
• Domain: uzpak.uz
• Forward Confirmation: No (0.85 confidence)
• Email Auth: SPF: No, DMARC: No

DNS records resolve to uzpak.uz domain infrastructure with no email authentication configured.

---

Neighborhood Analysis (213.230.76.0/24)

• Total Siblings: 9
• Active Siblings: 1
• Threat Siblings: 0
• Abuse Density: 0
• Classification: Clean

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 1 (213.230.76.27, score: 55)
• Low Risk: 7

The subnet shows minimal abuse density. One neighbor (213.230.76.27) exhibits elevated risk (55) and warrants attention.

---

Historical Observations

16 total observations recorded. Key temporal indicators:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Is Persistently Malicious: False

The IP shows no persistent malicious behavior pattern. Signals indicate stable infrastructure usage.

---

Relationships

6 relationships identified:

• 3 Same Network relationships → UZTELECOM
• 3 DNS Association relationships → 117.64.uzpak.uz

All relationships confirm the IP's association with UZTELECOM network infrastructure.

---

Control Plane Data

• Origin ASN: 8193
• BGP Prefix: 213.230.76.0/23
• Route Stability: False
• Route Changes (30d): 0
• RPKI State: Not available
• DNSSEC Valid: Yes
• DNSBL Listed Count: 2 of 8

The BGP prefix shows route instability flags despite zero recorded route changes in the past 30 days.

---

Recommended Actions

Priority: LOW-MONITOR

• Monitor DNSBL listing status for changes
• Investigate geolocation inconsistency (SE vs UZ)
• Watch neighbor 213.230.76.27 (risk score 55)
• No immediate blocking required

Firewall Rule: Monitor traffic from 213.230.76.0/24 for policy alignment.

---

Conclusion

IP 213.230.76.117 is a UZTELECOM infrastructure endpoint with moderate risk classification. While not exhibiting active threat behavior, the geolocation inconsistency and DNSBL listings warrant continued monitoring. The subnet environment is generally clean with minimal abuse density. No immediate threat action required, but maintain awareness of the one medium-risk neighbor in the same /24 block.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.