176.103.0.202📋 Copy

IP Intelligence Briefing: 176.103.0.202

Date: 2026-06-10

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Provider: AS56812 (DIALOGKOM-MNT, Ukraine)
• Geolocation: Ukraine, Kharkivska Oblast, Balakliya (49.46°N, 36.87°E)
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP activity)
• Ownership: Registered to DIALOGKOM-MNT (RIPE) with CIDR 176.103.0.0/19.

---

**2. Threat Indicators**

• No direct malicious indicators (no malware, phishing, or exploit activity).
• DNSSEC Valid: Confirmed.
• DNSBL Listings: 4 out of 8 lists (moderate abuse density).
• BGP Analysis: Stable route, no recent changes.

---

**3. Network Behavior**

• Subnet: 176.103.0.202/24
• Abuse Density: 9.8% (mostly clean, but 7 high-risk neighbors).
• High-Risk Neighbors:

- 176.103.0.57 (80), 176.103.0.98 (80), 176.103.0.227 (80).

• Subnet Classification: "mostly_clean" but with inherited risk from 6 neighbors.

---

**4. Historical Observations**

• Recent Activity (2026-06-10):

- Listed in 8 threat feeds (2 high-severity listings).

- Geolocation confirmed via 3 probes (avg RTT: 142ms).

- No persistent malicious activity detected.

---

**5. Relationships & Context**

• Network Affiliation: Part of DIALOG-NET (AS56812), a Ukrainian provider.
• No Known Campaigns or Exploits: No correlated IPs or certificate matches.
• No Mobile/Residential/Cloud Indicators: Likely enterprise or infrastructure.

---

**6. Recommendations**

• Monitor Subnet: Focus on high-risk neighbors (e.g., 176.103.0.57, 98, 227).
• Block IP: Consider blocking due to high risk score and DNSBL listings.
• Investigate Provider: Review DIALOGKOM-MNT for broader network risks.
• Check for Enumeration: No open services, but verify if the firewalled host is a honeypot.

---

Note: This IP shows no direct malicious activity but warrants scrutiny due to its high risk score and subnet context.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.