176.103.4.155
176.103.4.155 is an IPv4 address operated by DIALOGKOM-MNT (AS56812), geolocated to Balakliya, Ukraine. As of November 6, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected.
# IP INTELLIGENCE BRIEFING
Target: 176.103.4.155/32
Date: Current Intelligence Cycle
Classification: MODERATE RISK
---
## EXECUTIVE SUMMARY
IP 176.103.4.155 is assigned to ASN 56812 (DIALOGKOM-MNT) within the 176.103.0.0/19 block, registered under RIR RIPE. Geolocation indicates Balakliya, Kharkivs'ka Oblast', Ukraine. The IP presents a moderate risk profile (risk score: 45/100) with no active threat indicators. No open services or ports detected; the IP appears firewalled. Despite lack of direct malicious activity, the IP is listed on 3 of 8 DNSBLs, warranting defensive monitoring.
---
## RISK ASSESSMENT
| Metric | Value |
|---|---|
| **Risk Score** | 45/100 (Moderate) |
| **Abuse Confidence** | Not assessed |
| **DNSBL Listings** | 3 of 8 total lists |
| **Subnet Abuse Density** | 0.056 (moderate) |
| **Threat Persistence** | 0 days |
| **Campaign Correlation** | None detected |
---
## NETWORK CLASSIFICATION
- Network Role: Firewalled / No Services
- Infrastructure Type: None detected
- Provider: Not identified
- Cloud/Proxy/VPN: Negative across all categories
- ISP: DIALOGKOM-MNT (ASN 56812)
- Geolocation: UA (Ukraine) – Balakliya, Kharkivs'ka Oblast'
---
## THREAT INDICATORS
Direct Indicators: None
- No known attacker reputation
- No spam source indicators
- No Tor exit node
- No active campaigns correlated
Environmental Signals:
- DNSBL listings present (3 of 8 lists)
- Subnet contains 4 high-risk neighbors, 43 medium-risk, 20 low-risk
- One threat sibling detected within /24 subnet
---
## OBSERVATION HISTORY
16 historical observations recorded. Recent signals (2026-07-28) indicate:
- Stable ownership with no changes
- Subnet classified as "clean" in immediate observation
- No persistent malicious activity detected
- Average ownership duration: Not established
Temporal Analysis: The IP has shown no signs of escalating threat behavior over the observation window.
---
## NEIGHBORHOOD ANALYSIS
Subnet: 176.103.4.0/24
Total Siblings: 72
Active Siblings: 33
Threat Siblings: 1
High-Risk Neighbors Identified:
- 176.103.4.2 (Risk: 70/100, Authority: 50)
- 176.103.4.15 (Risk: 70/100, Authority: 50)
- 176.103.4.19 (Risk: 55/100, Authority: 50)
- 176.103.4.17 (Risk: 40/100, Authority: 50)
Implication: The /24 subnet demonstrates mixed risk characteristics. Target IP (155) operates at moderate risk while adjacent addresses show elevated threat activity.
---
## RELATIONSHIPS
- Network Association: DIALOG-NET (176.103.0.0/19)
- Relationship Count: 2 entries (network-based)
---
## RECOMMENDED ACTIONS
The following firewall and WAF rules are recommended based on risk profile:
| Platform | Action |
|---|---|
| **iptables** | `iptables -A INPUT -s 176.103.4.155 -j DROP` |
| **nftables** | `nft add rule inet filter input ip saddr 176.103.4.155 drop` |
| **nginx** | `deny 176.103.4.155;` |
| **pfSense** | `176.103.4.155/32` |
| **Cloudflare WAF** | Block IP with expression `ip.src eq 176.103.4.155` |
| **AWS WAF** | Add address `176.103.4.155/32` with description "IPDebrief risk 45" |
---
## ANALYST NOTES
While the target IP shows no direct malicious activity, the presence of 3 DNSBL listings and the mixed-risk environment of the /24 subnet warrant defensive posture. The subnet contains multiple high-risk neighbors that may be exploited for lateral movement. Consider blocking at the perimeter and monitoring for any service changes. The IP is not associated with known campaigns or persistent malicious behavior.
---
*Intel generated by IPDebrief intelligence platform. Rules should be validated against operational requirements before deployment.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DIALOGKOM-MNT |
| ASN | AS56812 |
| Network Name | DIALOG-NET |
| CIDR Block | 176.103.0.0/19 |
| RIR | RIPE |
| Country | UA |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS56812 |
| Network Prefix | 176.103.0.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 21% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 39% | 2 | 3 |
| Overall | 18% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-17 17:12:16 UTC |
| Last Seen | 2026-11-07 06:47:45 UTC |
| Profile Built | 2026-11-06 23:45:46 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 176.103.4.155
Who owns the IP address 176.103.4.155?
176.103.4.155 is registered to DIALOGKOM-MNT. The address falls within the 176.103.0.0/19 network block. Registration is held at RIPE.
Where is 176.103.4.155 located?
Geolocation data places 176.103.4.155 in Balakliya, Kharkivs’ka Oblast’, Ukraine. The local time zone is Europe/Kyiv. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 176.103.4.155 malicious or safe?
176.103.4.155 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.