171.75.8.23📋 Copy

Intelligence Briefing: IP 171.75.8.23

Summary

IP 171.75.8.23 is categorized as Low Risk with a risk score of 25. The asset is located in a clean neighborhood with no threat siblings. The current recommendation is to Monitor due to low severity.

Network Identity

The address belongs to ASN 3356 (LEVEL3-MNT) within the CIDR block 171.75.0.0/16. Ownership is attributed to LEVEL3-MNT (UK-LVLT-19940225) under the APNIC RIR. DNS reverse resolution identifies the host as `ae1.11.edge4.bru1.neo.colt.net` on the `colt.net` domain. Geolocation data places the asset in the United Kingdom (GB).

Threat Assessment

The IP is not flagged as a known attacker, spam source, or Tor exit node. While the threat profile indicated zero blacklists, control plane data recorded one DNSBL listing out of eight total lists. No known campaigns or correlated IPs were identified. The threat actor classification remains "Suspicious Host" due to the presence of threat indicators, though specific classification is lacking.

Behavioral & Technical

No open ports or active services were detected, classifying the network role as "Firewalled / No Services." Behavioral analysis reported zero honeypot hits, enumeration strikes, or WAF violations. The asset was observed 22 times between 2026-09-05 and 2026-09-27.

Recommendation

Maintain current monitoring posture. No immediate mitigation is required given the clean neighborhood context and low risk score.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.