192.72.56.178📋 Copy

# Intelligence Briefing: 192.72.56.178/32

Classification: Moderate Risk / Low Immediate Threat

Date: 2026-07-23

---

## Executive Summary

IP address 192.72.56.178 is associated with SEEDNET-NET (Anti-Spammer NCIC, ASN 4780) in Taiwan. The IP carries a moderate risk score of 55/100 but demonstrates no active threat indicators, no open services, and clean neighborhood classification. The address is currently firewalled with no detectable services.

---

## Technical Profile

Ownership & Registration:

• ASN: 4780 (Anti-Spammer NCIC)
• Organization: SEEDNET-NET
• CIDR Block: 192.72.56.0/23
• RIR: ARIN
• PTR Hostname: h178-192-72-56.seed.net.tw

Geolocation:

• Country: Taiwan (TW)
• City: TW Taiwan
• Coordinates: 23.7°N, 120.96°E
• Timezone: Asia/Taipei

Network Services:

• Open Ports: None detected
• Service Purpose: Firewalled / No Services
• HTTP/TLS: No services detected
• Certificate: None

---

## Threat Assessment

Current Threat Indicators:

• Abuse Confidence Score: Not applicable (no active abuse detected)
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None

Control Plane Analysis:

• DNSBL Listings: 3 out of 8 total lists
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not validated
• Route Stability: Stable (0 changes in last 30 days)

---

## Neighborhood Analysis

Subnet: 192.72.56.178/24

• Abuse Density: 0 (Clean)
• Classification: Clean
• Total Siblings: 1
• Active/Threat Siblings: 0

The /24 subnet demonstrates no elevated abuse activity. No neighboring IPs in the subnet show threat indicators.

---

## Observation History

Analysis Period: Recent observations from 2026-07-23

Total Observations: 16

Key Historical Signals:

• Subnet classification consistently reported as "clean" with 0 abuse density
• Geolocation signals confirm Taiwan attribution with 200km accuracy radius
• Ownership signals show stable attribution to Anti-Spammer NCIC
• No evidence of persistent malicious behavior (threat persistence days: 0)
• No ownership changes recorded

---

## Relationship Graph

Identified Relationships:

• Network Associations: SEEDNET-NET (multiple instances)
• DNS Associations: h178-192-72-56.seed.net.tw (multiple instances)
• External Entities: None detected

The IP shows no relationships to external organizations, certificates, or suspicious hostnames beyond its own DNS records.

---

## Recommended Actions

Immediate: No blocking or filtering recommended. The IP demonstrates benign characteristics with no active threat indicators.

Monitoring: Continue standard monitoring. The moderate risk score (55) may warrant inclusion in baseline traffic patterns rather than active blocking.

Firewall Rules: No specific rules required. Allow or block based on organizational policy, not threat intelligence.

---

## Conclusion

192.72.56.178 is a legitimate IP address associated with Taiwanese ISP infrastructure. The moderate risk score reflects general ISP-level risk rather than specific malicious activity. No immediate threat mitigation is required. The IP is currently inactive with no open services, making it a low-priority target for defensive operations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.