216.40.73.190📋 Copy

INTELLIGENCE BRIEFING: 216.40.73.190

Classification: LOW RISK / MONITORING REQUIRED

Date: 2026-07-30

Analyst: IPDebrief Threat Intelligence Team

---

EXECUTIVE SUMMARY

IP address 216.40.73.190 is a clean, low-risk infrastructure endpoint hosted by PureKernel LLC (ASN:213954). No active threat indicators, malicious activity, or blacklist associations detected. The address is firewalled with no open services and demonstrates stable network characteristics.

OWNERSHIP & NETWORK ATTRIBUTES

• Organization: PureKernel LLC
• Network Name: PUREKERNEL-HOSTING
• CIDR Block: 216.40.72.0/22
• ASN: 213954
• Geolocation: United States (ARIN registry)
• Registration Status: Active ownership record with abuse contact available via RDAP

RISK ASSESSMENT

THREAT INDICATORS ANALYSIS

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable (clean profile)
• Known Campaigns: None detected
• Threat Feeds: Empty

SERVICE & PORT ANALYSIS

• Open Ports: None detected
• Service Purpose: Firewalled / No Services
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None
• DNS Records: No PTR hostnames, no forward resolution
• Email Authentication: No SPF/DMARC records

NEIGHBORHOOD INTELLIGENCE

Subnet: 216.40.73.0/24

• Classification: Clean
• Abuse Density: 0.0
• Inherited Risk: 0
• Total Siblings: 3
• Active Siblings: 2
• Threat Siblings: 0

Adjacent IP Risk Profile:

*Note: Adjacent IPs show low-to-medium risk levels. Target IP (216.40.73.190) remains clean.*

OBSERVATION HISTORY (15 RECORDS)

Recent observation timeline (2026-07-30):

• 18:10:11: ICMP validation blocked - unable to validate geolocation
• 18:07:12: Ownership data confirmed (PureKernel LLC)
• 18:05:47: Network classification confirmed (not cloud, CDN, proxy, or VPN)
• 18:05:20: Port scanning detected; no open ports identified
• 18:05:09: RIR ownership data confirmed

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

CONTROL PLANE DATA

• BGP Prefix: 216.40.72.0/22
• Route Changes (30d): 0
• Route Stability: False
• DNSSEC Valid: Yes
• Operator Score: 0.1304 (Minimal)
• DNSBL Listed: 0 / 8 total checks

RELATIONSHIP GRAPH

Three relationships identified, all classified as "Same Network" pointing to PUREKERNEL-HOSTING network infrastructure. No cross-organization or cross-subnet associations detected.

RECOMMENDED ACTIONS

Immediate Action: None required. Risk score of 0 indicates no immediate blocking or filtering necessary.

Monitoring Recommendations:

• Monitor for service activation on previously firewalled address
• Track adjacent IPs (216.40.73.83, 216.40.73.130) for risk escalation
• Verify ICMP validation capability for geolocation confirmation

Firewall Rules: None required. No actionable firewall rules generated due to low-risk profile.

CONCLUSION

IP 216.40.73.190 represents a benign infrastructure endpoint with no current threat activity. The address is properly registered, maintains stable ownership, and shows no malicious behavior indicators. Adjacent subnet analysis reveals two neighboring IPs with moderate risk scores (40-55), but the target IP remains clean. Continue standard monitoring practices and watch for service activation or risk profile changes.

---

*Report generated by IPDebrief Threat Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.