# 176.103.4.155 — IP Intelligence Summary 176.103.4.155 is an IPv4 address operated by DIALOGKOM-MNT (AS56812), geolocated to Balakliya, Ukraine. As of November 6, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/176.103.4.155 - Last updated: 2026-11-06 ## Ownership - Organization: DIALOGKOM-MNT - Network name: DIALOG-NET - Allocated block: 176.103.0.0/19 - ASN: AS56812 (https://ipdebrief.com/asn/56812) - Regional registry: RIPE ## Location - City: Balakliya - Region: Kharkivs’ka Oblast’ - Country: Ukraine - Time zone: Europe/Kyiv ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: High Risk (80/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP INTELLIGENCE BRIEFING **Target:** 176.103.4.155/32 **Date:** Current Intelligence Cycle **Classification:** MODERATE RISK \--- \## EXECUTIVE SUMMARY IP 176.103.4.155 is assigned to ASN 56812 (DIALOGKOM-MNT) within the 176.103.0.0/19 block, registered under RIR RIPE. Geolocation indicates Balakliya, Kharkivs'ka Oblast', Ukraine. The IP presents a moderate risk profile (risk score: 45/100) with no active threat indicators. No open services or ports detected; the IP appears firewalled. Despite lack of direct malicious activity, the IP is listed on 3 of 8 DNSBLs, warranting defensive monitoring. \--- \## RISK ASSESSMENT | Metric | Value | |--------|-------| | **Risk Score** | 45/100 (Moderate) | | **Abuse Confidence** | Not assessed | | **DNSBL Listings** | 3 of 8 total lists | | **Subnet Abuse Density** | 0.056 (moderate) | | **Threat Persistence** | 0 days | | **Campaign Correlation** | None detected | \--- \## NETWORK CLASSIFICATION \- **Network Role:** Firewalled / No Services \- **Infrastructure Type:** None detected \- **Provider:** Not identified \- **Cloud/Proxy/VPN:** Negative across all categories \- **ISP:** DIALOGKOM-MNT (ASN 56812) \- **Geolocation:** UA (Ukraine) – Balakliya, Kharkivs'ka Oblast' \--- \## THREAT INDICATORS **Direct Indicators:** None \- No known attacker reputation \- No spam source indicators \- No Tor exit node \- No active campaigns correlated **Environmental Signals:** \- DNSBL listings present (3 of 8 lists) \- Subnet contains 4 high-risk neighbors, 43 medium-risk, 20 low-risk \- One threat sibling detected within /24 subnet \--- \## OBSERVATION HISTORY 16 historical observations recorded. Recent signals (2026-07-28) indicate: \- Stable ownership with no changes \- Subnet classified as "clean" in immediate observation \- No persistent malicious activity detected \- Average ownership duration: Not established **Temporal Analysis:** The IP has shown no signs of escalating threat behavior over the observation window. \--- \## NEIGHBORHOOD ANALYSIS **Subnet:** 176.103.4.0/24 **Total Siblings:** 72 **Active Siblings:** 33 **Threat Siblings:** 1 **High-Risk Neighbors Identified:** \- 176.103.4.2 (Risk: 70/100, Authority: 50) \- 176.103.4.15 (Risk: 70/100, Authority: 50) \- 176.103.4.19 (Risk: 55/100, Authority: 50) \- 176.103.4.17 (Risk: 40/100, Authority: 50) **Implication:** The /24 subnet demonstrates mixed risk characteristics. Target IP (155) operates at moderate risk while adjacent addresses show elevated threat activity. \--- \## RELATIONSHIPS \- **Network Association:** DIALOG-NET (176.103.0.0/19) \- **Relationship Count:** 2 entries (network-based) \--- \## RECOMMENDED ACTIONS The following firewall and WAF rules are recommended based on risk profile: | Platform | Action | |----------|--------| | **iptables** | \`iptables -A INPUT -s 176.103.4.155 -j DROP\` | | **nftables** | \`nft add rule inet filter input ip saddr 176.103.4.155 drop\` | | **nginx** | \`deny 176.103.4.155;\` | | **pfSense** | \`176.103.4.155/32\` | | **Cloudflare WAF** | Block IP with expression \`ip.src eq 176.103.4.155\` | | **AWS WAF** | Add address \`176.103.4.155/32\` with description "IPDebrief risk 45" | \--- \## ANALYST NOTES While the target IP shows no direct malicious activity, the presence of 3 DNSBL listings and the mixed-risk environment of the /24 subnet warrant defensive posture. The subnet contains multiple high-risk neighbors that may be exploited for lateral movement. Consider blocking at the perimeter and monitoring for any service changes. The IP is not associated with known campaigns or persistent malicious behavior. \--- *Intel generated by IPDebrief intelligence platform. Rules should be validated against operational requirements before deployment.* ## Nearby addresses - 176.103.4.2 (https://ipdebrief.com/176.103.4.2) - 176.103.4.10 (https://ipdebrief.com/176.103.4.10) - 176.103.4.14 (https://ipdebrief.com/176.103.4.14) - 176.103.4.15 (https://ipdebrief.com/176.103.4.15) - 176.103.4.17 (https://ipdebrief.com/176.103.4.17) - 176.103.4.19 (https://ipdebrief.com/176.103.4.19) - 176.103.4.24 (https://ipdebrief.com/176.103.4.24) - 176.103.4.25 (https://ipdebrief.com/176.103.4.25) - 176.103.4.28 (https://ipdebrief.com/176.103.4.28) - 176.103.4.29 (https://ipdebrief.com/176.103.4.29) - 176.103.4.31 (https://ipdebrief.com/176.103.4.31) - 176.103.4.32 (https://ipdebrief.com/176.103.4.32) --- Source: IPDebrief, "176.103.4.155 IP intelligence", https://ipdebrief.com/176.103.4.155, updated 2026-11-06. Assessments are probabilistic.