176.115.247.176📋 Copy

# IP Intelligence Briefing: 176.115.247.176

## Executive Summary

IP address 176.115.247.176 is classified as Low Risk with a risk score of 30/100. The IP belongs to NETSYSTEM-NET infrastructure (ASN 198766) and is geolocated to Brzesko, Lesser Poland, Poland. No active threat indicators were detected, and the IP is not associated with known malicious campaigns.

---

## Network Ownership & Classification

• Organization: ART-COM-MNT / NETSYSTEM-NET
• ASN: 198766 (ART-COM-MNT)
• CIDR Block: 176.115.240.0/20
• Country: Poland (PL)
• Region: Lesser Poland
• City: Brzesko
• Network Role: Firewalled / No Services
• RIR: RIPE

---

## Threat Assessment

• Reputation Score: 30 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 blacklists (control plane indicates 2 DNSBL listings out of 8 total)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None detected

---

## Technical Profile

• DNS PTR Record: 176.115.247.176.ip.netsystem.net.pl
• Forward DNS: Not confirmed
• Open Ports: None detected
• Services: No active services (firewalled)
• TLS Certificate: None
• HTTP: No title/banner detected
• Route Stability: Unstable (false)

---

## Neighborhood Analysis (176.115.247.0/24)

The /24 subnet contains 10 sibling IPs with an abuse density of 0.222. Risk distribution across neighbors:

• High Risk (2): 176.115.247.92 (80), 176.115.247.126 (80)
• Medium Risk (5): 176.115.247.34 (40), 176.115.247.100 (55), 176.115.247.109 (55), 176.115.247.124 (55), 176.115.247.152 (55)
• Low Risk (2): 176.115.247.176 (30), 176.115.247.128 (30)

Key Finding: The target IP is one of only two low-risk IPs in its /24 subnet. Neighboring IPs show elevated risk scores, suggesting potential shared infrastructure or network-level concerns.

---

## Relationship Graph

The IP has minimal external relationships:

• Same Network: NETSYSTEM-NET (4 entries)
• DNS Association: 176.115.247.176.ip.netsystem.net.pl (3 entries)

No relationships to hostnames, organizations, or certificates beyond the network infrastructure.

---

## Historical Observations

18 observations recorded from 2026-07-29:

• Network Classification: Consistently classified as "clean"
• Abuse Density: Consistently 0
• Threat Persistence: 0 days
• Threat Observation Count: 0
• Ownership Changes: 0
• Confidence Levels: 0.30-0.85 across signals

Temporal analysis indicates stable, non-malicious behavior with no observed escalation in risk profile.

---

## Control Plane & Routing

• Origin ASN: 198766
• BGP Prefix: 176.115.240.0/20
• RPKI State: Not available
• Route Changes (30d): 0
• DNSSEC Valid: Yes
• MOAS (Multi-Origin ASN): No

---

## Recommended Actions

Based on the low-risk profile and lack of threat indicators:

• No immediate blocking required
• Monitor for changes in threat indicators
• Consider contextual awareness of neighboring IP risks

---

## Intelligence Conclusion

IP 176.115.247.176 presents a low-risk profile suitable for standard network operations. The IP is properly firewalled with no active services and no detected malicious activity. However, SOC analysts should maintain awareness that approximately 70% of sibling IPs in the same /24 subnet exhibit elevated risk scores, suggesting potential infrastructure sharing or network-level concerns that warrant periodic review.

Classification: LOW RISK

Priority: STANDARD MONITORING

Threat Indicators: NONE DETECTED

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.