203.198.150.36📋 Copy

# IP Intelligence Briefing: 203.198.150.36/32

Classification: Low Risk / Commercial Infrastructure

Date: 2026-07-29

Status: Active

---

## Executive Summary

IP address 203.198.150.36 is identified as a legitimate commercial infrastructure address associated with Netvigator (AS4760), a Hong Kong-based Internet service provider. The IP exhibits no malicious indicators, maintains a zero risk score, and presents as a standard single-service host with no evidence of abuse or threat activity.

---

## Network Ownership & Geolocation

The address belongs to the NETVIGATOR network infrastructure. Geo-validation indicates Hong Kong placement with 30km accuracy radius. Multiple geo-sources confirm this location (geoConsensus: true).

---

## DNS & Hostname Resolution

• PTR Record: 036.150.198.203.static.netvigator.com
• Forward Resolution: Confirmed to netvigator.com domain
• Email Authentication: SPF and DMARC records present
• HTTP Host: netvigator.com

DNS configuration demonstrates proper email authentication setup with valid SPF and DMARC records.

---

## Service Profile

• Open Ports: TCP/80 (HTTP)
• HTTP Status Code: 500 (Internal Server Error)
• HTTP Version: 1.1
• Server Response Time: 497ms

The IP responds on port 80 with an error status code, suggesting the service may be misconfigured or under maintenance. No TLS certificate detected.

---

## Threat Intelligence Assessment

No threat indicators detected. The IP does not appear on any threat feeds, blacklists, or known campaign databases.

---

## Network Neighborhood Analysis

• Subnet: 203.198.150.0/24
• Abuse Density: 0%
• Total Siblings: 0
• Threat Siblings: 0
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0

The subnet shows zero abuse density with no sibling IPs flagged as threats, indicating this is an isolated infrastructure address without neighborhood-level malicious activity.

---

## Historical Observations

Analysis of 19 signal observations reveals:

• Threat Persistence: None
• Ownership Changes: 0
• Last Observed: 2026-07-29
• Classification Stability: Consistent

The IP maintains stable ownership characteristics with no observed malicious behavior over the observation period. No threat persistence patterns detected.

---

## Control Plane Analysis

• Route Stability: Unstable (isRouteStable: false)
• DNSSEC: Valid
• RPKI State: Not available
• IRR Consistency: Not available
• Route Changes (30d): 0
• MOAS Status: No
• Delegation Age: Not available

BGP routing shows route instability. DNSSEC validation is enabled.

---

## Recommended Security Actions

No immediate action required. The IP presents as legitimate commercial infrastructure with no threat indicators. However, the 500 HTTP error status may warrant monitoring if this IP is expected to serve user-facing services.

Firewall Rules: None recommended

---

## Relationships

• Same Network: NETVIGATOR (multiple associations)
• DNS Associations: 036.150.198.203.static.netvigator.com

No external relationships detected beyond organizational network associations.

---

## Analyst Notes

This IP represents standard ISP infrastructure with no malicious attributes. The 500 error response on port 80 may indicate service degradation or misconfiguration rather than security concerns. SOC teams may monitor if this address appears in connection logs, but no blocking or mitigation actions are indicated.

Confidence Level: High – Comprehensive threat intelligence signals support benign classification.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.