150.107.213.198📋 Copy

# IPDebrief Intelligence Briefing

Target IP: 150.107.213.198/32

Date: 2026-07-27

Classification: Low Risk Residential/ISP Endpoint

---

## Executive Summary

The target IP 150.107.213.198 is a low-risk endpoint associated with ALLIANCEBROADBAND-IN, a broadband infrastructure provider in Malappuram, Kerala, India. The IP hosts a single web service (HTTP/80) running freenginx/1.28.0 and resolves to node-150-107-213-198.alliancebroadband.in. No active threat indicators or malicious campaigns have been identified.

---

## Technical Profile

---

## Network Services & Fingerprint

• Open Ports: TCP/80 (HTTP)
• Server Software: freenginx/1.28.0
• HTTP Version: 1.1
• Response Code: 200 OK
• DNS Resolution: node-150-107-213-198.alliancebroadband.in (forward confirmed)
• TLS Certificate: Not present
• Security Headers: HSTS, CSP, Permissions Policy - Not present

---

## Threat Assessment

• Blacklist Status: Clean (0 blacklist matches)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None
• Abuse Confidence Score: Not applicable
• Threat Persistence: 0 days observed
• Persistently Malicious: False

Control Plane Data:

• Route Stability: Stable
• DNSSEC Valid: Yes
• DNSBL Listings: 1 (out of 8 total lists scanned)
• IRR Consistency: Not evaluated
• RPKI State: Not evaluated

---

## Observation History

Total signals observed: 23

Recent Signals (2026-07-27):

• Geolocation: Validated as plausible (IN, Kerala, Malappuram)
• Subnet Classification: Clean
• Ownership: 0 changes observed
• Network Role: ISP/Residential broadband

Temporal Analysis:

• No persistent malicious behavior detected
• No significant risk trajectory observed
• Geo validation shows ICMP blocked (unable to validate RTT)

---

## Network Relationships

• Network Association: ALLIANCEBROADBAND-IN (multiple network-level links)
• DNS Associations: node-150-107-213-198.alliancebroadband.in (multiple DNS records)

No associations to known malicious infrastructure, command-and-control servers, or certificate authorities were identified.

---

## Neighborhood Analysis (150.107.213.0/24)

• Total Neighbors: 6
• Abuse Density: 0 (low)
• Risk Distribution: 3 high-risk, 3 low-risk IPs

Notable Neighboring IPs:

• 150.107.213.133 (Risk: 40, Authority: 50)
• 150.107.213.134 (Risk: 40, Authority: 50)
• 150.107.213.155 (Risk: 40, Authority: 50)

The target IP's immediate subnet exhibits minimal abuse density. Three neighboring IPs show elevated risk scores (40), suggesting localized ISP-level activity that may warrant monitoring but does not indicate coordinated malicious infrastructure.

---

## Recommended Actions

Firewall Rules: No blocking recommended at this time.

Monitoring Recommendations:

1. Monitor for changes in DNS resolution patterns

2. Track any new open ports or service additions

3. Watch for emergence of threat indicators on the subnet

4. Consider geo-blocking if legitimate business requirements exist

Investigative Notes:

• The IP presents as standard ISP broadband infrastructure
• No evidence of malicious activity or abuse
• Neighborhood analysis shows mixed risk profile typical of broadband networks
• Continue standard passive monitoring

---

Status: No immediate threat. Continue standard monitoring.

Report Generated: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.