178.156.112.144📋 Copy

# INTELLIGENCE BRIEFING: 178.156.112.144/32

Classification: Moderate Risk | Date: Current | Status: Active Monitoring

---

## EXECUTIVE SUMMARY

IP address 178.156.112.144 is classified as Moderate Risk (Score: 40). The address is assigned to FIBRANET (AS211261) under organization JOSE MIGUEL GARCIA, located in Torredonjimeno, Spain (RIPE RIR). No active services are detected, indicating firewall protection or minimal service deployment. The IP demonstrates routing instability but maintains DNSSEC validation.

---

## OWNERSHIP & ATTRIBUTION

Historical records show ASN reassignment activity, with observations of AS29119 (SERVIHOSTING) and AS211261 (FIBRANET) in recent traffic patterns.

---

## THREAT POSTURE

• Risk Score: 40 (Moderate)
• Abuse Confidence: Not assessed
• Blacklist Count: 0
• Known Campaigns: None
• Tor/Proxy/CDN: Not identified
• Known Attacker: No

The IP shows no direct threat indicators. No malicious campaigns, attacker signatures, or spam source characteristics detected.

---

## NETWORK ENVIRONMENT

• Subnet Abuse Density: 66.67% (0.6667)
• Classification: Mostly Clean
• Threat Siblings: 2 out of 3 total siblings
• Inherited Risk Score: 5

Neighbor IPs:

Network context indicates elevated neighborhood activity despite the target IP's moderate risk classification.

---

## CONTROL PLANE & ROUTING

• BGP Prefix: 178.156.112.0/24
• Route Stability: Unstable
• DNSSEC Valid: Yes
• DNSBL Listed: 2 of 8 lists
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not assessed
• IRR Consistency: Not assessed

---

## SERVICES & INFRASTRUCTURE

• Open Ports: None detected
• HTTP Title/Server Banner: None
• TLS Certificate: None
• DNS Records: No PTR hostnames, no forward resolution
• Email Auth: SPF/DMARC not configured (no hosted domains)
• Service Purpose: Firewalled / No Services

---

## OBSERVATION HISTORY

Total Observations: 22 signals recorded

Recent activity indicates:

• ASN changes between AS29119 and AS211261
• Consistent geolocation attribution to Spain (ES)
• Multiple routing and reputation signal sources (Cymru, AlienVault-OTX)
• Recent observations from June 2026 timeframe

---

## RELATIONSHIP GRAPH

25 relationships identified, all associated with FIBRANET-SANGONERA network. Strong network-level correlation confirms infrastructure consistency within the FIBRANET ecosystem.

---

## SOC RECOMMENDATIONS

Priority: Monitor | Action: Standard logging advised

1. Monitor the subnet 178.156.112.0/24 for coordinated activity given 66.67% abuse density

2. Log inbound/outbound traffic from this IP; no immediate blocking required

3. Correlate with neighbors 178.156.112.137 and 178.156.112.201 for threat intelligence patterns

4. Review routing stability flags if unexpected traffic patterns emerge

5. No immediate firewall rules recommended based on current risk profile

---

*Intelligence generated from IPDebrief analysis. All data sourced from automated observation and threat intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.