# 176.103.2.130 — IP Intelligence Summary

176.103.2.130 is an IPv4 address operated by DIALOGKOM-MNT (AS56812), geolocated to Balakliya, Ukraine. As of August 29, 2026, IPDebrief rates it Low Risk (15/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/176.103.2.130
- Last updated: 2026-08-29

## Ownership

- Organization: DIALOGKOM-MNT
- Network name: DIALOG-NET
- Allocated block: 176.103.0.0/19
- ASN: AS56812 (https://ipdebrief.com/asn/56812)
- Regional registry: RIPE

## Location

- City: Balakliya
- Region: Kharkivs’ka Oblast’
- Country: Ukraine
- Time zone: Europe/Kyiv

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (15/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IPDEBRIEF INTELLIGENCE BRIEFING

**Target IP:** 176.103.2.130/32

**Report Date:** 2026-07-23

**Classification:** MODERATE RISK

\---

\## EXECUTIVE SUMMARY

IP 176.103.2.130 presents a moderate risk profile (score: 65/100) with no active threat indicators. The address is associated with DIALOG-NET infrastructure in Ukraine and operates with minimal service exposure. While currently classified as clean, the IP is listed on 3 DNS blacklist entries and should be monitored due to elevated risk scoring.

\---

\## OWNERSHIP & INFRASTRUCTURE

| Attribute | Value |

|-----------|-------|

| **ASN** | 56812 |

| **Organization** | DIALOGKOM-MNT (DIALOG-NET) |

| **CIDR Block** | 176.103.0.0/19 |

| **RIR** | RIPE |

| **Registration** | Not available |

**Network Classification:** The IP is assigned to a firewalled network with no open services detected. No TLS certificates, HTTP titles, or server banners were observed during probing.

\---

\## GEOLOCATION

| Attribute | Value |

|-----------|-------|

| **Country** | Ukraine (UA) |

| **Region** | Kharkivs'ka Oblast' |

| **City** | Balakliya |

| **Timezone** | Europe/Kyiv |

| **Geo Confidence** | Low (geoPlausible: false) |

*Note: Geolocation data shows low confidence with 500km accuracy radius and only one geo-source consensus.*

\---

\## THREAT ASSESSMENT

\### Risk Profile

\- **Overall Risk Score:** 65/100 (Moderate)

\- **Abuse Confidence Score:** Not available

\- **Known Attacker:** No

\- **Tor Exit Node:** No

\- **Spam Source:** No

\### Blacklist Status

\- **DNSBL Listed:** 3 of 8 total lists

\- **Threat Feeds:** None detected

\- **Campaign Correlations:** 0

\### Network Behavior

\- **Honeypot Hits:** 0

\- **Enumeration Strikes:** 0

\- **WAF Violations:** Not detected

\- **Is Persistently Malicious:** No

\---

\## NEIGHBORHOOD ANALYSIS

**Subnet:** 176.103.2.130/24

\- **Total Siblings:** 65

\- **Active Siblings:** 36

\- **Threat Siblings:** 2

\- **Abuse Density:** 0.0308 (Low-Moderate)

\- **Subnet Classification:** Clean

**Risk Distribution:**

\- High Risk: 1 IP

\- Medium Risk: 47 IPs

\- Low Risk: 15 IPs

The subnet shows minimal inherited risk (score: 1). One high-risk neighbor was observed at 176.103.2.4 (risk: 40), and 176.103.2.23 showed elevated scoring (55).

\---

\## SIGNAL HISTORY (16 Observations)

Recent observations (July 23, 2026) show:

\- **Subnet Classification:** Consistent "clean" rating across multiple signals

\- **Port Scanning:** Multiple ports probed with no open services confirmed

\- **Operator Scoring:** Minimal (0.1304)

\- **Data Sufficiency:** 83% coverage across threat, routing, services, ownership, reputation, and geolocation dimensions

No significant temporal escalation in threat behavior observed.

\---

\## CONTROL PLANE DATA

| Metric | Value |

|--------|-------|

| **Origin ASN** | 56812 |

| **BGP Prefix** | 176.103.0.0/20 |

| **Route Stability** | False |

| **Route Changes (30d)** | 0 |

| **RPKI State** | Not available |

| **IRR Consistency** | Not available |

| **DNSSEC Valid** | True |

| **DNSBL Total Lists** | 8 |

\---

\## RELATIONSHIP MAPPING

The IP is associated with **DIALOG-NET** network entity. No additional relationships to hostnames, organizations, or certificates were detected.

\---

\## SECURITY RECOMMENDATIONS

\### Immediate Actions

1. **Increase logging verbosity** for traffic from this IP address

2. **Review recent activity** to confirm benign patterns

3. **Implement firewall rules** based on risk profile

\### Recommended Firewall Rules

\`\`\`bash

\# iptables

iptables -A INPUT -s 176.103.2.130 -j DROP

\# nftables

nft add rule inet filter input ip saddr 176.103.2.130 drop

\# nginx

deny 176.103.2.130;

\`\`\`

\### Platform-Specific Actions

\- **Cloudflare WAF:** Block with expression \`ip.src eq 176.103.2.130\`

\- **AWS WAF:** Add to blocklist with CIDR 176.103.2.130/32

\- **pfSense:** Add 176.103.2.130/32 to block list

\---

\## ANALYST NOTES

\- **Risk Level:** Monitor rather than block immediately. The moderate risk score (65) with no active threat indicators suggests this IP may be misconfigured or in transition.

\- **Geographic Context:** IP is located in Ukraine; consider threat context for your operational environment.

\- **Infrastructure Type:** Firewalled network with no public services suggests this may be internal infrastructure or a protected endpoint.

\- **Action Priority:** Low-Medium. Implement logging and monitoring, but block only if additional threat indicators emerge.

\---

**END OF BRIEFING**

## Nearby addresses

- 176.103.2.0 (https://ipdebrief.com/176.103.2.0)
- 176.103.2.1 (https://ipdebrief.com/176.103.2.1)
- 176.103.2.4 (https://ipdebrief.com/176.103.2.4)
- 176.103.2.10 (https://ipdebrief.com/176.103.2.10)
- 176.103.2.11 (https://ipdebrief.com/176.103.2.11)
- 176.103.2.19 (https://ipdebrief.com/176.103.2.19)
- 176.103.2.20 (https://ipdebrief.com/176.103.2.20)
- 176.103.2.23 (https://ipdebrief.com/176.103.2.23)
- 176.103.2.25 (https://ipdebrief.com/176.103.2.25)
- 176.103.2.29 (https://ipdebrief.com/176.103.2.29)
- 176.103.2.31 (https://ipdebrief.com/176.103.2.31)
- 176.103.2.33 (https://ipdebrief.com/176.103.2.33)

---

Source: IPDebrief, "176.103.2.130 IP intelligence", https://ipdebrief.com/176.103.2.130, updated 2026-08-29. Assessments are probabilistic.
