162.217.100.41📋 Copy

# IPDebrief Intelligence Briefing

Target IP: 162.217.100.41/32

Date of Analysis: 2026-07-26

Classification: Low Risk (Score: 25/100)

---

## Executive Summary

The target IP 162.217.100.41 is assigned to Internap Holding LLC (ASN 32475) within the HIQPLATFORM-V4-6 block (162.217.96.0/21). The IP presents a low-risk profile with no active threat indicators, no open services, and no association with known malicious campaigns. However, geolocation validation anomalies and control plane instability warrant monitoring.

---

## Infrastructure Profile

Ownership:

• Organization: Internap Holding LLC
• ASN: 32475
• Block: 162.217.96.0/21
• Abuse Contact: abuse@horizoniq.com
• RIR: ARIN

Network Classification:

• Service Purpose: Firewalled / No Services
• Not classified as cloud, CDN, VPN, proxy, hosting, mobile, residential, Tor, bogon, or anycast infrastructure
• No open ports detected
• No TLS certificates or HTTP services active

Geolocation:

• Reported Location: United States (37.75°N, -97.82°W)
• Validation Status: Implausible
• Observed RTT: 56.0ms vs Minimum Possible: 152.5ms for 7,626km distance
• 5 probes confirmed geo implausibility

---

## Threat Assessment

Risk Indicators:

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence: Not applicable
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

Threat Feeds:

• No indicators in threat feeds
• No known campaign associations
• Zero certificate matches
• Zero banner matches

Control Plane:

• Route Stability: Unstable (isRouteStable: false)
• BGP Prefix: 162.217.100.0/22
• Operator Score: 0.1304 (Minimal)
• DNSBL Listed: 1 of 8 total lists
• DNSSEC: Valid

---

## Neighborhood Analysis

Subnet: 162.217.100.41/24

• Abuse Density: 0.5 (Low)
• Classification: Mostly Clean
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 1

Neighboring IP:

• 162.217.100.196 (Risk Score: 25, Authority Score: 50)

The /24 subnet maintains low abuse density with minimal threat concentration.

---

## Relationship Graph

Two relationships identified, both classified as "Same Network" pointing to network identifier "HIQPLATFORM-V4-6." Limited relationship depth suggests this IP operates in isolation from other monitored entities.

---

## Historical Observations

Total Observations: 16

Latest Activity: 2026-07-26

Key Historical Signals:

• Transit hop observed via Cogent Communications (ORD/Chicago)
• Traceroute successfully reached target (18 hops)
• Neighborhood classification: mostly_clean with abuse density 0.5
• Geolocation validation failures: RTT distance implausibility
• Ownership records stable with no recent changes

---

## Recommended Actions

Current Risk Level: Low (Score: 25)

• No specific firewall rules generated
• No action recommendations due to minimal threat profile
• Monitor for route stability changes

Suggested Monitoring:

• Continue observing geolocation anomalies
• Watch for any service emergence on previously firewalled ports
• Monitor control plane stability metrics

---

## Conclusion

IP 162.217.100.41 operates as a firewalled host within a low-risk hosting block (HIQPLATFORM-V4-6). The infrastructure shows no malicious activity, no open services, and no threat indicators. The primary concern is geolocation validation implausibility and control plane instability, which may indicate configuration anomalies or measurement artifacts. No immediate blocking or mitigation actions recommended; standard monitoring protocols apply.

Confidence Level: High (based on comprehensive multi-source validation)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.