23.191.200.21
IP Intelligence Briefing: 23.191.200.21
Date: 2026-06-09
---
**Risk Assessment**
- Risk Score: 70 (High Risk)
- Threat Indicators:
- Tor exit node activity detected.
- Listed in 1+ threat feeds (high severity).
- Network Role: Identified as a Tor exit node, suggesting potential anonymization or malicious traffic routing.
---
**Ownership & Geolocation**
- Registrar: Unredacted Inc (ASN 401401, ARIN).
- Geolocation:
- Registered to "US-NY" (New York, USA).
- Geo Validation:
- Plausibility: False (RTT discrepancy: 47ms vs. expected 152.5ms for 7,626km).
- Accuracy Radius: 2,500km (low precision).
---
**Observation History**
- Recent Activity (2026-06-09):
- 1+ threat feed listings (high severity).
- Operator score: 0.13 (Minimal risk, but flagged for DNSSEC and routing anomalies).
- No persistent malicious behavior detected.
---
**Relationships**
- Linked Entities:
- Same network: "UNREDACTED-V4-01" (repeated 25x).
- No direct links to known malicious organizations or campaigns.
---
**Neighborhood Analysis**
- Subnet: 23.191.200.0/24.
- Abuse Density: 0 (clean classification).
- Neighbor Risk Distribution:
- 42 IPs: Medium risk (25–50 score).
- 58 IPs: Low risk (0–25 score).
- Notable: 1 IP (23.191.200.6) has a high risk score of 70.
---
**Recommendations**
1. Monitor Tor Traffic: Block or monitor traffic originating from this subnet (23.191.200.0/24) due to Tor exit node activity.
2. Validate Geolocation: Investigate the geo validation violation (RTT discrepancy) to rule out spoofing or misconfigured infrastructure.
3. Subnet Scrutiny: Focus on high-risk neighbors (e.g., 23.191.200.6) for potential correlation with malicious activity.
4. Check Ownership: Verify Unredacted Inc's compliance with IP abuse policies, given the high-risk registration.
---
Source: IPDebrief Threat Intelligence Platform.
Note: This IP exhibits mixed risk factors, with Tor exit node activity and geo validation anomalies requiring further investigation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Unredacted Inc |
| ASN | AS401401 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2025-09-25T00:00:00+00:00 |
| Valid Until | 2026-07-28T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 306 days |
| Serial Number | 032D9C5130C19A29 |
| Thumbprint | 9408EAB48EABB9EFC4D15439A44B4367B95F0E2A |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 26% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 17 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-22 13:35:45 UTC |
| Last Seen | 2026-06-26 21:06:50 UTC |
| Profile Built | 2026-06-27 18:46:27 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 49 |
Full dossier details are available via our API.