176.103.0.148
IP INTELLIGENCE BRIEFING
Target: 176.103.0.148/32
Date: Current Assessment
Risk Level: HIGH (Score: 70/100)
---
EXECUTIVE SUMMARY
IP address 176.103.0.148 is a Ukrainian origin address associated with ASN 56812 (DIALOGKOM-MNT, DIALOG-NET). The IP is classified as high-risk (score 70) with 4 DNSBL listings and no active services detected. Geolocation indicates Balakliia, Kharkiv region, Ukraine. No known attack campaigns, Tor exit, or persistent malicious activity observed.
---
NETWORK OWNERSHIP & ATTRIBUTION
| Attribute | Value |
|---|---|
| ASN | 56812 |
| Organization | DIALOGKOM-MNT |
| Netname | DIALOG-NET |
| CIDR Block | 176.103.0.0/19 |
| RIR | RIPE |
| Registration | Ukrainian network |
---
GEOLOCATION INTELLIGENCE
| Attribute | Value |
|---|---|
| Country | Ukraine (UA) |
| Region | Kharkiv |
| City | Balakliia |
| Coordinates | 48.38°N, 31.17°E |
| Accuracy Radius | 500km |
| Timezone | Europe/Kyiv |
Note: Geolocation confidence is moderate (500km accuracy radius).
---
THREAT INDICATORS
| Indicator | Status |
|---|---|
| Risk Score | 70 (High) |
| Blacklist Count | 0 |
| DNSBL Listings | 4 of 8 lists |
| Tor Exit Node | No |
| Known Attacker | No |
| Spam Source | No |
| Open Ports | None |
| Hosted Domains | 0 |
| DNSSEC Valid | Yes |
| Route Stable | No |
Control Plane Analysis:
- BGP Prefix: 176.103.0.0/20
- Origin ASN: 56812
- Route changes (30d): 0
- RPKI State: Unknown
- MoAS: No
---
SUBNET NEIGHBORHOOD ANALYSIS
Scope: 176.103.0.0/24 (68 total IPs)
| Metric | Value |
|---|---|
| Abuse Density | 2.9% |
| High-Risk Neighbors | 2 |
| Medium-Risk Neighbors | 35 |
| Low-Risk Neighbors | 27 |
| Active Siblings | 0 |
| Threat Siblings | 0 |
Notable High-Risk Neighbors:
- 176.103.0.9 (Risk: 40)
- 176.103.0.21 (Risk: 55)
- 176.103.0.23 (Risk: 40)
- 176.103.0.26 (Risk: 40)
Assessment: Subnet shows low-to-moderate abuse concentration. The target IP shares the /24 with multiple IPs exhibiting elevated risk scores.
---
OBSERVATION HISTORY (15 signals)
Recent activity (2026-07-18) shows:
- Ownership signals confirmed (DIALOGKOM-MNT)
- Geolocation signals consistent (UA)
- No ownership changes detected
- No persistent malicious activity flagged
- Threat observation count: 0
- Persistence duration: 0 days
Temporal Analysis: The IP demonstrates stability with no observed ownership or threat pattern changes over the monitoring period.
---
NETWORK BEHAVIOR
| Metric | Value |
|---|---|
| Traceroute Hops | 30 |
| Transit Networks | Comcast, Cogent |
| Honeypot Hits | 0 |
| Enumeration Strikes | 0 |
| WAF Violations | 0 |
| Total Incidents | 0 |
| Auto-Banned | No |
---
RELATIONSHIP GRAPH
| Type | Target | Count |
|---|---|---|
| Same Network | DIALOG-NET | 3 |
All relationships map to the same network organization, indicating no external entity associations.
---
RECOMMENDATIONS FOR SOC ANALYSIS
Immediate Actions:
1. Monitor - The IP is classified high-risk with multiple DNSBL listings. Continue monitoring for pattern changes.
2. Block - Consider blocking if observed in malicious traffic. No services detected reduces immediate threat.
3. Context - Verify if traffic relates to the Ukrainian origin. Consider geographic policy.
4. Subnet Context - Monitor neighboring IPs (176.103.0.9, 176.103.0.21, 176.103.0.23, 176.103.0.26) which show elevated risk scores.
Threat Indicators:
- No active threat feeds matched
- No known campaigns correlated
- No certificate matches detected
- No correlated IPs in relationship graph
---
Classification: UNASSIGNED / MONITOR
Status: ACTIVE (High Risk Classification)
Source: IPDebrief Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DIALOGKOM-MNT |
| ASN | AS56812 |
| Network Name | DIALOG-NET |
| CIDR Block | 176.103.0.0/19 |
| RIR | RIPE |
| Country | UA |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS56812 |
| Network Prefix | 176.103.0.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 17% | 1 | 1 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 24% | 2 | 2 |
| Overall | 22% | 9 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-08 01:59:22 UTC |
| Last Seen | 2026-08-27 07:09:41 UTC |
| Profile Built | 2026-08-29 05:22:39 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 176.103.0.148
Who owns the IP address 176.103.0.148?
176.103.0.148 is registered to DIALOGKOM-MNT. The address falls within the 176.103.0.0/19 network block. Registration is held at RIPE.
Where is 176.103.0.148 located?
Geolocation data places 176.103.0.148 in Bairak, 63, Ukraine. The local time zone is Europe/Kyiv. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 176.103.0.148 malicious or safe?
176.103.0.148 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.