94.143.195.223
94.143.195.223 is an IPv4 address operated by ELCAT-RIPE-MNT (AS8449), geolocated to Stockholm, Sweden. Its reverse DNS name is skynet.elcat.kg. As of October 29, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.
Intelligence Briefing: 94.143.195.223
Status: High Risk (Score 70)
Recommendation: Block (Severity: Critical)
Ownership: ELCAT-NET (ASN 8449), Stockholm, Sweden
Threat Indicators: Campaign likelihood assessed as High with 28 correlated IPs.
Network Role: Firewalled / No Services Open
DNS Resolution: skynet.elcat.kg
Intent: Unknown (Insufficient data to classify)
Confidence: Overall 18.33% (Data Sufficiency 66.67%)
Observation Period: Live (Last Seen 2026-10-03)
Narrative:
Analysis of IP 94.143.195.223 indicated a High Risk reputation with a risk score of 70. The address is attributed to ELCAT-NET (ASN 8449) in Stockholm, Sweden, resolving to the PTR hostname skynet.elcat.kg. Threat correlation data showed a High campaign likelihood with 28 correlated IPs. Although no open ports or active services were detected, the profile recommendation was to Block with Critical severity due to high risk scores and strong threat evidence. Data sufficiency was recorded at 66.67% with an overall confidence of 18.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ELCAT-RIPE-MNT |
| ASN | AS8449 |
| Network Name | ELCAT-NET |
| CIDR Block | 94.143.195.0/24 |
| RIR | RIPE |
| Country | KG |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | skynet.elcat.kg |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | skynet.elcat.kg |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 1/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8449 |
| Network Prefix | 94.143.195.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 19% | 1 | 2 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-03 05:23:42 UTC |
| Last Seen | 2026-10-29 04:35:44 UTC |
| Profile Built | 2026-10-29 04:47:27 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 32 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 94.143.195.223
Who owns the IP address 94.143.195.223?
94.143.195.223 is registered to ELCAT-RIPE-MNT. The address falls within the 94.143.195.0/24 network block. Registration is held at RIPE.
Where is 94.143.195.223 located?
Geolocation data places 94.143.195.223 in Stockholm, 26, Sweden. The local time zone is Europe/Stockholm. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 94.143.195.223 malicious or safe?
94.143.195.223 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 94.143.195.223?
The reverse DNS (PTR) record for 94.143.195.223 is skynet.elcat.kg. This hostname is not forward-confirmed, so it should be treated as a weak signal.