106.215.157.145📋 Copy

IP INTELLIGENCE BRIEFING: 106.215.157.145/32

Classification: Moderate Risk | Reputation Score: 40/100 | Location: Bhubaneswar, Odisha, India

---

EXECUTIVE SUMMARY

IP 106.215.157.145 is a moderate-risk address operating from India with no active services detected. The IP is listed on 2 of 8 DNSBLs with high severity ratings but lacks active threat indicators. The immediate subnet (106.215.157.0/24) demonstrates low abuse density with three neighboring IPs showing low-risk profiles.

---

TECHNICAL PROFILE

• ASN/Network: ASN 24560, BGP Prefix 106.215.156.0/22
• Geolocation: Bhubaneswar, Odisha, India (20.27°N, 85.83°E)
• Network Role: Firewalled / No Services (no open ports detected)
• Control Plane: Route changes observed within 30-day window; route stability flag: false
• DNSSEC: Valid
• DNSBL Status: Listed on 2 of 8 threat feeds

---

THREAT INDICATORS

• Active Threats: None detected
• Known Campaigns: No associations
• Behavioral Indicators: No honeypot hits, no enumeration strikes, no WAF violations
• Campaign Likelihood: Not assessed (no correlated IPs)
• Historical Persistence: 0 threat persistence days observed

---

NEIGHBORHOOD ANALYSIS

Subnet 106.215.157.0/24 contains three observed siblings:

• 106.215.157.95: Risk Score 25 (Low)
• 106.215.157.210: Risk Score 25 (Low)
• 106.215.157.228: Risk Score 0 (Low)

Abuse Density: 0/10 | Classification: Clean subnet environment

---

OBSERVATION HISTORY

Seven signal observations recorded with consistent geolocation attribution to Bhubaneswar, India. Recent signals include:

• DNSSEC validation confirmed
• DNSBL listings with high severity ratings
• Operator score rated "Minimal" (0.1304)

---

SOC RECOMMENDATIONS

1. Firewall Policy: Consider blocking at perimeter if strict policy applies (risk score 40, DNSBL listed)

2. Monitoring: Track service status changes; currently firewalled with no open ports

3. Subnet Context: Neighboring IPs show low risk; subnet-level threat is minimal

4. Threat Intel Integration: Add to watchlist for DNSBL compliance; no immediate threat indicators

5. Investigation: No related IPs or relationships identified; isolated address

---

CONCLUSION

IP 106.215.157.145 presents moderate risk primarily due to DNSBL listings rather than active malicious behavior. The clean subnet environment and lack of threat indicators suggest this may be a non-residential or dormant address. Recommend standard blocking or allowlist verification based on organizational policy thresholds.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.