203.192.227.40📋 Copy

# IP Intelligence Briefing: 203.192.227.40

## Executive Summary

IP address 203.192.227.40 was assessed as a Moderate Risk address (Risk Score: 40) associated with Onebroadband infrastructure in Pune, Maharashtra, India. The IP shows no active threat indicators, no blacklist entries, and no services running. The address belongs to a clean subnet with low abuse density.

## Infrastructure Profile

Ownership & Registration:

• ASN: 17665 (IRT-IN-IMCL)
• Organization: Onebroadband
• Network Block: 203.192.192.0/18
• RIR: APNIC
• DNS PTR Record: dhcp-192-227-40.in2cable.com

Geolocation:

• Country: India (IN)
• Region: Maharashtra
• City: Pune
• Geolocation confidence: High (geo_plausible: true, geo_consensus: true)

Network Role:

• Classification: Firewalled / No Services
• No open ports detected
• Not identified as: CDN, Cloud, Hosting, Proxy, Tor, VPN, or Mobile

## Threat Assessment

Current Risk Indicators:

• Risk Score: 40 (Moderate)
• Abuse Confidence Score: Not assigned
• Blacklist Count: 0
• Known Campaigns: None
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No

Control Plane Data:

• BGP Prefix: 203.192.227.0/24
• Route Stability: Unstable
• DNSBL Listed: 2 out of 8 total lists
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not validated

## Temporal Analysis

Observation History:

• Ownership Changes: 0 (stable ownership)
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

Recent Signals (July 27, 2026):

• Provider/Organization: Confirmed as IRT-IN-IMCL / Onebroadband
• Geolocation: Confirmed India (20.59°N, 78.96°E)
• ICMP Validation: Blocked (unable to validate RTT)
• Risk Assessment: Stable with no escalation trends

## Network Neighborhood Analysis

Subnet: 203.192.227.0/24

• Abuse Density: 0 (Clean)
• Total Siblings: 15
• Active Siblings: 4
• Threat Siblings: 0
• Classification: Clean

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 9 (Scores: 15, 40, 55, 65)
• Low Risk: 5 (Scores: 15)

Notable neighbors include 203.192.227.142 (Risk: 65) and 203.192.227.245 (Risk: 55), suggesting variable risk across the subnet but no concentrated threat activity.

## Relationships

The IP associates with:

• Onebroadband network (multiple same-network relationships)
• DNS hostnames: dhcp-192-227-40.in2cable.com

## Recommended Actions

Based on the moderate risk profile (Score: 40) with no active threat indicators, the following firewall rules are recommended:

iptables:

```

iptables -A INPUT -s 203.192.227.40 -j DROP

```

nftables:

```

nft add rule inet filter input ip saddr 203.192.227.40 drop

```

nginx:

```

deny 203.192.227.40;

```

Cloudflare WAF:

```json

{

"description": "Block 203.192.227.40 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 203.192.227.40"

}

}

```

AWS WAF:

```json

{

"Addresses": ["203.192.227.40/32"],

"Description": "IPDebrief risk 40"

}

```

## Intelligence Notes

The IP address belongs to a residential broadband provider (Onebroadband) with no services actively listening. The subnet shows clean abuse density despite several neighbors scoring moderate to high risk. The address appears stable with no ownership changes and no persistent malicious activity observed. Monitoring is recommended given the moderate baseline risk score, but immediate blocking should be weighed against provider reputation and observed behavior.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.