5.167.67.93
IP Intelligence Dossier
Your IP: 216.73.216.123
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 5.167.67.93/32
*Generated via IPDebrief Analysis*
---
**1. Core Profile**
- Risk Score: 40 (Moderate Risk)
- Ownership: Residences under ER-Telecom Holding (RU), Chuvash Republic, Cheboksary, Russia.
- Geolocation: Residential endpoint in Cheboksary, Russia (latitude/longitude unspecified).
- Threat Indicators: No malicious indicators, spam, or known attacker associations.
- Network Role: Residential endpoint (not CDN, cloud, or infrastructure).
- DNS: PTR hostname `5x167x67x93.dynamic.cheb.ertelecom.ru` linked to `ertelecom.ru`. SPF/DMArc records detected.
- Services: No open ports or TLS certificates observed.
---
**2. Observation History**
- Activity Timeline: 47 observations since June 12, 2026.
- Risk Trends: Minimal risk consistently (operator score: 0.13), with no persistent malicious behavior.
- Geolocation Validation: ICMP blocked; geolocation inferred via DNS (approx. 7,919 km from probe).
---
**3. Network Relationships**
- Linked Networks: Part of `ERTH-CHEB-PPPOE-22-NET` (residential subnet).
- Subnet Analysis:
- 5.167.67.93/24 subnet has high abuse density (1/10).
- 256 total IPs, 178 active; 256 flagged for abuse.
- Neighboring IPs show mixed risk scores (40–49), suggesting potential for compromised devices.
---
**4. Threat Context**
- Subnet Risk: High abuse density in the subnet, despite the IP’s moderate risk.
- Residential Vulnerability: Residential endpoints are common targets for botnets or lateral movement.
- DNSSEC Validity: DNSSEC is enabled, but no CAA records detected.
---
**5. Recommendations**
- Monitor Subnet: Investigate correlated risks in the 5.167.64.0/20 BGP prefix.
- Network Segmentation: Isolate residential traffic to limit lateral movement.
- DNS Monitoring: Track DNS queries to `ertelecom.ru` for anomalies.
- Threat Intelligence: Cross-reference with abuse reports for the subnet.
---
*End of Briefing*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Network Operation Center CJSC ER-Telecom Holding Cheboksary branch |
| ASN | AS57026 |
| Network Name | — |
| CIDR Block | — |
| RIR | RIPE |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 5x167x67x93.dynamic.cheb.ertelecom.ru |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 5x167x67x93.dynamic.cheb.ertelecom.ru |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
No certificate
Issued by —
N/A
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 3 |
| routing | 20% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 20% | 2 | 3 |
| reputation | 27% | 1 | 3 |
| geolocation | 24% | 2 | 3 |
| Overall | 21% | 9 | 14 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:05:24 UTC |
| Last Seen | 2026-06-26 18:12:14 UTC |
| Profile Built | 2026-06-27 05:39:06 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 49 |
🔍 21 signal types · 49 observations collected
This report is generated from 21+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.