213.230.92.230📋 Copy

# IP Intelligence Briefing: 213.230.92.230/32

Target: 213.230.92.230

Risk Assessment: Moderate Risk (Score: 55/100)

Classification: Infrastructure / No Active Services

Report Date: 2026-06-23

---

## Executive Summary

IP 213.230.92.230 is assigned to Uzbekistan's UZTELECOM (AS8193) infrastructure in Tashkent. The address exhibits moderate risk characteristics with no active services detected, but exists within a subnet showing elevated abuse density (30%). The IP was listed on three blacklists with high severity on 2026-06-18, suggesting historical abuse activity.

---

## Network Attribution

• ASN: 8193 (UZTELECOM - Uzbekistan)
• Registry: RIPE NCC (allocated 1997-02-03, stable 10,727 days)
• Location: Tashkent, Uzbekistan (41.26°N, 69.22°E)
• BGP Path: 6939 → 12389 → 28910 → 8193
• Route Stability: Stable (no changes in last 30 days)
• DNS Resolution: 230.64.uzpak.uz (forward confirmation not verified)

---

## Threat Profile

Current Status: Moderate Risk

• Risk Score: 55
• Abuse Confidence: Not quantified
• Known Attacker: No
• Tor Exit/Proxy: No
• Spam Source: No

Blacklist Status: Listed on 3 of 8 threat feeds (max severity: high)

• Observed on 2026-06-18 with high-severity listings
• No current active threat indicators
• No known campaigns or C2 associations

Service Activity: None detected

• No open ports, TLS certificates, or HTTP services
• Classified as "Firewalled / No Services"
• No honeypot hits or behavioral anomalies

---

## Neighborhood Analysis

Subnet: 213.230.92.0/24

Abuse Density: 30% (0.3)

Classification: Clean (but contextually elevated)

Risk Distribution Among Neighbors:

• High Risk: 6 IPs
• Medium Risk: 8 IPs
• Low Risk: 6 IPs

Notable High-Risk Neighbors:

• 213.230.92.22 (Risk: 80)
• 213.230.92.42 (Risk: 80)
• 213.230.92.49 (Risk: 80)
• 213.230.92.92 (Risk: 80)
• 213.230.92.115 (Risk: 80)
• 213.230.92.116 (Risk: 80)

Observation: The target IP's subnet shows mixed risk levels with 6 high-risk siblings, suggesting potential shared infrastructure abuse. Target IP 213.230.92.230 has 1 threat sibling identified within the /24.

---

## Historical Trends

Observation Count: 23 signals over monitoring period

• Consistent ASN: UZTELECOM (AS8193) across all observations
• Route Stability: No BGP prefix changes in 30-day window
• Ownership: No ownership changes detected
• Blacklist Activity: Significant listing activity on 2026-06-18

Trend Assessment: IP shows stable network infrastructure characteristics with no escalation or de-escalation of threat signals. Blacklist activity is the primary concern indicator.

---

## Recommendations for SOC

Monitor:

1. Neighborhood IPs: Consider blocking or monitoring 213.230.92.22, 213.230.92.42, 213.230.92.49, 213.230.92.92, 213.230.92.115, 213.230.92.116 due to high-risk scores

2. Blacklist Updates: Review current blacklist status (3/8 lists) and monitor for changes

3. Traffic Patterns: Investigate any traffic from subnet 213.230.92.0/24 if not already blocked

Actions:

• Implement firewall rules for subnet 213.230.92.0/24 if threat level warrants
• Monitor for lateral movement attempts from related high-risk neighbors
• Update threat intel feeds with current blacklist information

Risk Level: Monitor / Low-Medium Priority

Confidence: High (based on 23 historical observations)

---

Source: IPDebrief Threat Intelligence Platform

Data Freshness: Current as of 2026-06-23

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.