213.230.76.45📋 Copy

## IP INTELLIGENCE BRIEFING: 213.230.76.45/32

Classification: Low Risk / Infrastructure

Date: 2026-07-24

Analyst: IPDebrief Intelligence Team

---

EXECUTIVE SUMMARY

IP 213.230.76.45 is a low-risk (Score: 15) infrastructure endpoint associated with Uzbekistan's national telecommunications provider UZTELECOM. The address shows minimal threat indicators but exhibits inconsistent geolocation data between profile and historical observations. No active services or open ports detected.

---

OWNERSHIP & NETWORK ATTRIBUTES

Geolocation Discrepancy: Profile indicates Stockholm, SE (confidence: false) while historical observations show Tashkent, UZ. This suggests routing anomalies or multi-path traffic patterns common in telecom infrastructure.

---

THREAT ASSESSMENT

Current Risk Score: 15/100 (Low Risk)

Threat Indicators:

• Known attacker: No
• Tor exit node: No
• Spam source: No
• Active threat campaigns: None detected
• Enumeration strikes: 0
• WAF violations: 0
• Honeypot hits: 0

Control Plane:

• BGP Prefix: 213.230.76.0/23
• Route stability: Unstable (false)
• DNSSEC: Valid
• RPKI State: Not validated

---

NETWORK NEIGHBORHOOD ANALYSIS

Subnet: 213.230.76.0/24

Abuse Density: 0%

Total Siblings: 8

Risk Distribution:

• High Risk: 0
• Medium Risk: 2 (213.230.76.27 @ 55, 213.230.76.117 @ 40)
• Low Risk: 6

Notable Neighbors:

• 213.230.76.27 (Risk: 55) — Elevated medium risk
• 213.230.76.117 (Risk: 40) — Medium risk
• 213.230.76.191 (Risk: 30) — Low-medium risk

The subnet shows minimal abuse activity overall, with only 2 of 8 sibling IPs registering elevated risk scores.

---

OBSERVATION HISTORY

Total Observations: 16

Recent Signals (2026-07-24):

• Geolocation: Inconsistent (UZ/SE)
• Threat feeds: 1 pulse detected (AlienVault OTX)
• DNSBL: Listed on 8 lists with 1 active listing
• Domain: uzpak.uz (forward resolution confirmed)
• Ownership changes: 0 (stable)

Temporal Trends:

• Threat persistence: 0 days
• Persistently malicious: No
• Ownership changes: None observed

---

DNS & DOMAIN INTELLIGENCE

Associated Hostnames: 45.64.uzpak.uz

---

SERVICES & PORTS

• Open ports: None detected
• HTTP title: Not detected
• TLS certificate: Not detected
• Server banners: None

---

RECOMMENDED ACTIONS

SOC Analyst Guidance:

1. MONITOR — Track the inconsistent geolocation patterns; may indicate spoofing or routing manipulation

2. LOW PRIORITY BLOCKING — Risk score of 15 suggests minimal threat, but DNSBL listing warrants review

3. SUBNET AWARENESS — Be aware of neighbors 213.230.76.27 and 213.230.76.117 showing elevated risk scores

4. NO IMMEDIATE ACTION REQUIRED — No active services, no known attacker indicators, no campaign associations

Suggested Firewall Rules:

• Allow if required for legitimate Uzbekistan/telecom traffic
• Monitor for port scanning activity
• No immediate block recommended

---

ENDPOINTS SUMMARY

This IP represents normal telecom infrastructure behavior with standard risk characteristics. No evidence of malicious activity. Focus monitoring efforts on the subnet's higher-risk neighbors rather than this endpoint.

Status: Clear for business operations

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.