# 176.103.5.143 — IP Intelligence Summary

176.103.5.143 is an IPv4 address operated by DIALOGKOM-MNT (AS56812), geolocated to Balakliya, Ukraine. As of October 6, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/176.103.5.143
- Last updated: 2026-10-06

## Ownership

- Organization: DIALOGKOM-MNT
- Network name: DIALOG-NET
- Allocated block: 176.103.0.0/19
- ASN: AS56812 (https://ipdebrief.com/asn/56812)
- Regional registry: RIPE

## Location

- City: Balakliya
- Region: Kharkivs’ka Oblast’
- Country: Ukraine
- Time zone: Europe/Kyiv

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 176.103.5.143/32

**Date:** Current

**Classification:** Moderate Risk (55/100)

**Jurisdiction:** Ukraine (UA)

\---

\## Executive Summary

IP address 176.103.5.143 is classified as Moderate Risk with a risk score of 55. The address is associated with DIALOGKOM-MNT organization within the 176.103.0.0/19 block (ASN 56812). Current analysis indicates no open services and no active threat indicators, though the IP appears on 3 DNS blacklists. Recommended action is to block at perimeter with enhanced logging.

\---

\## Network Ownership & Geolocation

| Field | Value |

|-------|-------|

| **Organization** | DIALOGKOM-MNT |

| **Network Name** | DIALOG-NET |

| **ASN** | 56812 |

| **CIDR Block** | 176.103.0.0/19 |

| **Country** | Ukraine (UA) |

| **Region** | Kharkivs'ka Oblast' |

| **City** | Balakliya |

| **RIR** | RIPE |

\---

\## Threat Assessment

\- **Risk Score:** 55/100 (Moderate)

\- **Blacklist Count:** 3

\- **Tor Exit:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Open Ports:** None (Firewalled / No Services)

\- **Certificate Status:** No TLS certificates observed

\---

\## Neighborhood Context (176.103.5.0/24)

\- **Subnet Classification:** Mostly Clean

\- **Abuse Density:** 11.48%

\- **Total Siblings:** 61

\- **Active Siblings:** 25

\- **Threat Siblings:** 7

\- **Risk Distribution:** 2 High, 38 Medium, 19 Low

The /24 subnet shows moderate abuse concentration with 7 threat-identified siblings and 38 medium-risk neighbors.

\---

\## Control Plane Analysis

\- **Route Stability:** Unstable (isRouteStable: false)

\- **RPKI State:** Not verified

\- **DNSSEC:** Valid

\- **BGP Prefix:** 176.103.0.0/20

\- **IRR Consistency:** Not verified

\---

\## Historical Observation Summary

Analysis of 15 signal observations indicates:

\- **Geolocation:** Consistent Ukraine (UA) reporting

\- **Ownership:** No changes detected

\- **Threat Persistence:** Not persistently malicious

\- **Last Updated:** July 23, 2026

\---

\## Recommended Actions

\### Immediate

\`\`\`bash

\# iptables

iptables -A INPUT -s 176.103.5.143 -j DROP

\# nftables

nft add rule inet filter input ip saddr 176.103.5.143 drop

\`\`\`

\### Platform-Specific

| Platform | Rule |

|----------|------|

| **nginx** | \`deny 176.103.5.143;\` |

| **pfSense** | \`176.103.5.143/32\` |

| **Cloudflare WAF** | Block with expression: \`ip.src eq 176.103.5.143\` |

| **AWS WAF** | Add 176.103.5.143/32 to whitelist block |

\### Operational

\- Increase logging verbosity for this IP address

\- Review recent connection attempts and traffic patterns

\- Monitor for lateral movement attempts from related subnet IPs

\---

\## Intelligence Notes

\- No active exploitation campaigns correlated

\- No honeypot strikes or enumeration activity observed

\- Subnet abuse density (11.48%) suggests some malicious actors may operate from adjacent addresses

\- No services detected; IP appears to be firewalled or passive

**Assessment:** Block with monitoring. Related subnet IPs (176.103.5.0/24) show 7 known threats; consider broader subnet restrictions if threat activity escalates.

## Nearby addresses

- 176.103.5.0 (https://ipdebrief.com/176.103.5.0)
- 176.103.5.1 (https://ipdebrief.com/176.103.5.1)
- 176.103.5.2 (https://ipdebrief.com/176.103.5.2)
- 176.103.5.7 (https://ipdebrief.com/176.103.5.7)
- 176.103.5.8 (https://ipdebrief.com/176.103.5.8)
- 176.103.5.11 (https://ipdebrief.com/176.103.5.11)
- 176.103.5.17 (https://ipdebrief.com/176.103.5.17)
- 176.103.5.23 (https://ipdebrief.com/176.103.5.23)
- 176.103.5.25 (https://ipdebrief.com/176.103.5.25)
- 176.103.5.26 (https://ipdebrief.com/176.103.5.26)
- 176.103.5.27 (https://ipdebrief.com/176.103.5.27)
- 176.103.5.30 (https://ipdebrief.com/176.103.5.30)

---

Source: IPDebrief, "176.103.5.143 IP intelligence", https://ipdebrief.com/176.103.5.143, updated 2026-10-06. Assessments are probabilistic.