2.147.177.0📋 Copy

# IPDebrief Intelligence Briefing: 2.147.177.0

## Executive Summary

IP 2.147.177.0 presents a low-risk profile with a risk score of 25. The address is associated with IranCell Network Administrators (ASN 44244) within the Karaj-Users network block (2.147.0.0/16). No active services are running, and the IP exhibits minimal threat indicators. The neighborhood subnet (2.147.177.0/24) is classified as clean with zero abuse density.

## Technical Profile

Ownership & Registration

• Organization: IranCell Network Administrators
• Network Name: Karaj-Users
• ASN: 44244
• CIDR Block: 2.147.0.0/16
• RIR: RIPE
• Abuse Contact: Available via RDAP

Geolocation

• Country: Iran (IR)
• City/Region: Tehran
• Coordinates: 35.68°N, 51.42°E
• Geo Validation: Data plausible but ICMP blocked preventing full validation

Network Behavior

• Services: No open ports detected
• Firewall Status: Active / No services exposed
• Cloud/CDN/VPN: Not identified
• Mobile/Residential: Not identified

## Threat Intelligence Assessment

Risk Metrics

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence: Not applicable
• Blacklist Status: 0 blacklists
• DNSBL: 1 of 8 lists (minor concern)
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No

Control Plane Analysis

• Route Stability: Unstable (isRouteStable: false)
• BGP Prefix: 2.147.176.0/21
• RPKI State: Not validated
• Operator Score: 0.1304 (Minimal)

## Historical Observations (15 Signals)

Most recent activity recorded 2026-07-30. Signal types observed include:

• Geolocation measurements (Tehran, Iran)
• Subnet classification (clean, 0 abuse density)
• Port scanning (no services discovered)
• DNS/Operator scoring (minimal risk)

No persistent malicious behavior detected. Threat observation count: 0.

## Neighborhood Analysis (2.147.177.0/24)

• Total Siblings: 1 active
• Threat Siblings: 0
• Abuse Density: 0
• Classification: Clean
• Inherited Risk: 0

No neighboring IPs flagged for abuse.

## Relationship Graph

• Network Relationships: Karaj-Users (same network)
• No hostname, certificate, or organizational relationships detected

## Recommended Security Actions

Given the low-risk profile and lack of active services, no immediate blocking is required. The following actions are recommended:

1. Monitor for any service openings or port changes

2. Log traffic for baseline analysis

3. No blocking recommended at this time

## Threat Intel Narrative

The IP 2.147.177.0 is a residential or enterprise endpoint in Tehran, Iran, under IranCell Network Administrators. The address shows no signs of malicious activity, with no open services, no threat indicators, and a clean neighborhood. The single DNSBL listing appears to be a minor anomaly with no associated threat intelligence. The unstable routing may indicate dynamic IP allocation or network renumbering. This IP should be treated as low-risk traffic requiring no special handling unless behavior changes are observed.

---

*Intelligence generated by IPDebrief. Data current as of 2026-07-30.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.