INTELLIGENCE BRIEFING: IP 1.23.80.204/32
Classification: Low Risk | Date: July 30, 2026 | Status: Active Monitoring
---
**1. PROFILE SUMMARY**
IP Address: 1.23.80.204/32
Risk Score: 15/100 (Low Risk)
Reputation: Low Risk
Overall Classification: Clean
Network Ownership:
- ASN: 45528 (IRT-TIKONAIN-IN)
- Organization: IRT-TIKONAIN-IN
- Netname: TIKONAIN
- CIDR Block: 1.22.0.0/15
- RIR: APNIC (Asia Pacific Network Information Centre)
- Abuse Contact: Available via RDAP
Geolocation:
- Country: India (IN)
- Region: Gujarat
- City: Ahmedabad
- Coordinates: 23.03°N, 72.59°E
- Timezone: Asia/Kolkata
- GeoConsensus: True
---
**2. THREAT ASSESSMENT**
Current Threat Indicators:
- Abuse Confidence Score: Not available
- Blacklist Status: 1 DNSBL listing detected (of 8 total lists scanned)
- Known Campaigns: None identified
- Threat Feeds: No matches
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Network Services:
- Open Ports: None detected
- HTTP/HTTPS: Not responding (firewalled/no services)
- TLS Certificate: None
- Service Purpose: Firewalled / No Services
---
**3. OBSERVATION HISTORY (Last 13 Signals)**
Temporal Analysis:
- Observation Window: July 30, 2026 (recent activity)
- Geolocation Signals: India (IN) consistently reported across multiple probes
- Ownership Stability: 0 ownership changes detected
- Threat Persistence: 0 days (no persistent malicious activity)
- Is Persistently Malicious: False
Recent Signal Types:
- Geolocation inference (confidence: 0.52-0.95)
- Port scanning (no open ports identified)
- Ownership/registration data (APNIC registry, IRT-TIKONAIN-IN)
- DNS resolution status (forward resolution not confirmed)
---
**4. RELATIONSHIP GRAPH**
Identified Relationships: 2
- Type: Same Network
- Target: TIKONAIN (network)
- Note: Both relationships indicate the IP resides within the TIKONAIN network infrastructure
---
**5. NEIGHBORHOOD ANALYSIS (1.23.80.0/24 Subnet)**
Subnet Classification: Clean
Abuse Density: 0%
Neighbor Count: 0 (single IP in subnet)
Risk Distribution:
- High Risk: 0
- Medium Risk: 0
- Low Risk: 0
Assessment: The /24 subnet shows no abuse indicators. The IP 1.23.80.204 appears to be an isolated address within this network block with no sibling activity or neighboring threat indicators.
---
**6. CONTROL PLANE DATA**
- Origin ASN: 45528
- BGP Prefix: 1.23.80.0/24
- Route Stability: False (route changes detected in last 30 days)
- MoAS (Multiple Origin ASN): No
- Route Changes (30d): 0
- RPKI State: Not available
- IRR Consistency: Not available
- DNSSEC: Valid
- Operator Score: 0.1304 (Minimal)
---
**7. RECOMMENDED ACTIONS**
Security Recommendations: None (Risk Score: 15)
Firewall Rules: Not required based on current risk profile
Monitoring Priority: Low
- IP exhibits stable ownership
- No active threat indicators
- No malicious campaigns detected
- Subnet shows clean classification
---
**INTELLIGENCE CONCLUSION**
IP 1.23.80.204/32 presents a low-risk profile with no active threat indicators. The address belongs to IRT-TIKONAIN-IN (ASN 45528), a network infrastructure entity registered with APNIC. Geolocation data consistently points to Ahmedabad, Gujarat, India. The subnet (1.23.80.0/24) shows zero abuse density and no neighboring threat activity.
Threat Level: Low
Recommended Action: Monitor as baseline; no immediate blocking required. If traffic patterns change or new threat indicators emerge, re-evaluate within 30 days.
Next Review: Recommended if network role changes or abuse reports surface.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | IRT-TIKONAIN-IN |
| ASN | AS45528 |
| Network Name | TIKONAIN |
| CIDR Block | 1.22.0.0/15 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 22% | 6 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-27 15:45:49 UTC |
| Last Seen | 2026-07-30 12:11:55 UTC |
| Profile Built | 2026-07-30 12:19:22 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 16 |
Full dossier details are available via our API.