🌐 AS3255 — UARNET-AS LLC EKSINTECH
RIR n/a · UA · reputation 17 (LOW)
Malicious IPs (local)
3
0 high-severity
Reputation
17
LOW
Malware families
0
hosted
Countries spanned
1
geo footprint
Announced prefixes
0
0 v4 / 0 v6
Abuse contact
—
run resolver
🏷 Registration & Abuse
| ASN | AS3255 |
| Holder / Org | Uarnet- Eksintech 🏢 Parent-org rollup |
| RIR | — |
| Country | UA |
| Local netblocks | 0 |
| Abuse contact | — Resolve contacts |
| All contacts | — |
🔥 Threat severity
3
Avg threat 0.5 · peak 0.5
🦠 Top malware families hosted
No data.
🏹 Threat actors hosted
No data.
🌎 Geographic spread
3
🏷 Tags in this ASN
2
2
2
📁 Categories
1
1
1
📅 First-seen timeline
3
🧭 /24 Subnet Concentration (pattern analysis)
| /24 block | Mal IPs | Avg | Peak |
|---|---|---|---|
194.44.140.0/24 |
3 | 0.50 |
Dense /24s = the operator's active malicious ranges — best candidates for CIDR-level blocks/takedown.
📊 Data Completeness & Gaps
Geolocation
100%
Category
100%
First-seen date
100%
Last-seen date
100%
Observed 2026-08-06 13:09:42 → 2026-08-06 19:47:06
· enrichment shown for 3/3 displayed
Gaps drive backfill: run resolve-all (geo/ASN), enrich-local, auto-tag.
🔥 Malicious IPs in AS3255 (3 total, 3 shown)
Every displayed IP carries its sightings, contributing sources, tags and enrichment inline. The CSV export contains the complete set with all fields.
| IP | Threat | Sightings | Sources | Family / Actor | Category | Tags | Enrichment | Country | First seen | Last seen |
|---|---|---|---|---|---|---|---|---|---|---|
194.44.140.41 |
0.50 | 3 | FireHOL level2, ThreatView IP (2) | — | IP Blocklists | auto-tagged, ip, medium-severity | ipinfo | UA | 2026-08-06 13:09:42 | 2026-08-06 14:46:34 |
194.44.140.157 |
0.50 | 1 | FireHOL level2 (1) | — | IP Reputation | auto-tagged, ip, medium-severity | ipinfo | UA | 2026-08-06 14:46:34 | 2026-08-06 14:46:34 |
194.44.140.163 |
0.50 | 1 | stamparm ipsum (1) | — | Reputation | — | ipinfo | UA | 2026-08-06 19:47:06 | 2026-08-06 19:47:06 |
🔍 OSINT pivots — external lookups
🔗 Internal pivots & analysis
⚡ Response & automation
📤 Share & export
📁 Case Management
Identity resolves local-first (asn_contacts + ip_ranges + indicators) so the dossier is complete even offline; registration / prefixes / peers augment live via RIPEstat & BGPView (cached). Reputation blends malicious-IP volume, average & peak threat, distinct malware families, geographic spread and sanctioned presence.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron