176.195.68.106📋 Copy

# IP Intelligence Briefing: 176.195.68.106/32

## Executive Summary

IP address 176.195.68.106 is a Russian infrastructure address operated by TI-MNT (NBN-NET) with a moderate risk score of 40. The IP presents as a firewalled host with no active services, no known threat indicators, and no malicious activity observed in monitoring systems.

## Network Identity & Ownership

• ASN: 12714 (TI-MNT)
• Organization: NBN-NET
• Network Block: 176.194.0.0/15 (RIPE RIR)
• BGP Prefix: 176.195.0.0/16
• Registration: RIPE registry

## Geolocation Data

• Country: Russia (RU)
• Region: Moscow
• IP Geolocation: Latitude 61.52, Longitude 105.32
• Accuracy Radius: 5,000 km
• Geo Consensus: Validated across multiple sources

## Threat Assessment

Overall Risk Score: 40 (Moderate Risk)

Threat Indicators

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Campaign Association: None
• Cert Matches: 0
• Banner Matches: 0

Service Status

• Open Ports: None detected
• TLS Certificate: None
• HTTP Service: None
• DNS Records: None
• Email Auth (SPF/DMARC): Not configured

Network Classification

• Infrastructure Type: Firewalled / No Services
• Cloud Provider: No
• CDN: No
• VPN/Proxy: No
• Hosting: No
• Mobile/Residential: No

## Control Plane Analysis

• DNSSEC: Valid
• DNSBL Listed: 2 of 8 total lists
• Route Stability: False
• RPKI State: Unknown
• Operator Score: 0.1304 (Minimal)
• ICMP Validation: Blocked

## Neighborhood Analysis (176.195.68.0/24)

• Abuse Density: 0
• Threat Siblings: 0
• Active Siblings: 0
• Risk Distribution: No high-risk neighbors detected
• Total Siblings: 0

## Historical Observations

18 observations recorded as of 2026-07-29:

• Classification Trend: Consistently marked as "clean"
• Subnet Abuse Density: 0
• Threat Persistence: 0 days
• Campaign Likelihood: None
• Correlated IPs: 0
• Certificate Matches: 0
• Banner Matches: 0

## Relationship Graph

The IP has 4 relationships, all classified as "Same Network" pointing to NBN-NET infrastructure.

## Recommended Actions

No automated security actions or firewall rules are recommended at this time based on the IP's current risk profile and lack of active threat indicators.

## Intelligence Narrative

IP 176.195.68.106 is a Russian infrastructure address belonging to the NBN-NET network under AS12714. The address demonstrates a clean operational profile with no services running (firewalled configuration), no open ports, and no malicious activity detected across multiple threat feeds. DNSBL listings on 2 of 8 total lists suggest limited reputation issues but no active abuse patterns. The IP has maintained a consistent "clean" classification across 18 observation cycles with zero threat persistence days. No relationships to known threat actors, campaigns, or malicious infrastructure were identified. The IP operates within the 176.195.0.0/16 BGP prefix with route instability noted. While geolocation data indicates Moscow, Russia, coordinate discrepancies exist (61.52, 105.32) suggesting potential data quality issues. The IP presents minimal operator-level risk and is not associated with Tor, VPN, proxy, or hosting services.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.