# IP INTELLIGENCE BRIEFING: 27.34.68.31/32
Date: 2026-07-30 | Classification: Low Risk | Risk Score: 25/100
## Executive Summary
IP address 27.34.68.31 is a dynamic residential broadband endpoint belonging to WorldLink Nepal (IRT-WLINK-NP). The address exhibits low-risk characteristics with no active threat indicators. The IP is classified as firewalled with no services exposed, and the associated /24 subnet demonstrates clean abuse density metrics.
## Ownership and Network Classification
- AS Number: 17501 (IRT-WLINK-NP)
- Organization: IRT-WLINK-NP
- Network Name: WLINK_BROADBAND_DYNAMIC_BRAS-JWL-04_NAT-IP
- CIDR Block: 27.34.68.0/24
- RIR: APNIC
- Connection Type: Dynamic Residential Broadband (BRAS NAT)
## Geolocation Data
- Country: United States (US)
- Region: US-NJ (New Jersey)
- City: Newark
- Timezone: America/New_York
- Validation Status: Geo-plausible confirmed
## Threat Intelligence Assessment
- Overall Risk Score: 25/100 (Low Risk)
- Blacklist Count: 0
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Abuse Confidence Score: Not applicable
- DNSBL Listings: 1 of 8 total lists
## Network Role and Services
- Infrastructure Type: Residential broadband endpoint
- Cloud/CDN/Proxy: No
- Open Ports: None detected
- Service Classification: Firewalled / No Services
- TLS Certificate: Not present
- HTTP Banner: Not present
## DNS Information
- PTR Record: 31.68.34.27.dynamic.wlink.com.np
- Forward Resolution: 31.68.34.27.dynamic.wlink.com.np
- Forward Confirmation: Not confirmed
- Hosted Domains: 0
- Email Authentication: No SPF, No DMARC
## Subnet Neighborhood Analysis (27.34.68.0/24)
- Total Siblings: 23
- Active Siblings: 15
- Threat Siblings: 0
- Abuse Density: 0%
- Subnet Classification: Clean
- Risk Distribution: 22 low-risk, 0 medium-risk, 0 high-risk
- Inherited Risk Score: 0
## Relationship Graph
- Same Network Relationships: Multiple entries linking to WLINK_BROADBAND_DYNAMIC_BRAS-JWL-04_NAT-IP
- DNS Associations: 5 DNS associations to hostname 31.68.34.27.dynamic.wlink.com.np
## Historical Signal Observations
- Total Observations: 20 signals recorded
- Ownership Changes: 0
- Threat Persistence Days: 0
- Persistently Malicious: No
- Recent Activity: Stable geolocation signals (Newark, NJ), consistent ownership data, no threat indicators detected in observation window
- Trace Analysis: 30-hop traceroute completed, target reached status variable
## Recommended Actions
- Monitor: No immediate action required. IP exhibits normal residential broadband behavior.
- Block: Not recommended based on current risk profile.
- Allow: Permitted traffic for residential broadband endpoints.
- Firewall Rules: No specific rules required; standard residential IP handling applies.
## Intelligence Narrative
IP 27.34.68.31 represents a legitimate dynamic residential broadband address assigned to WorldLink's broadband infrastructure. The address has been observed consistently with stable ownership characteristics and no malicious activity detected. The associated /24 subnet shows zero threat sibling activity and clean abuse density, indicating this is a benign residential network segment. The IP is firewalled with no services exposed, further reducing potential attack surface. Historical signals show no threat persistence or escalation patterns. SOC teams may treat this IP as low-risk with no immediate defensive actions required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | IRT-WLINK-NP |
| ASN | AS17501 |
| Network Name | WLINK_BROADBAND_DYNAMIC_BRAS-JWL-04_NAT-IP |
| CIDR Block | 27.34.68.0/24 |
| RIR | APNIC |
| Country | NP |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 31.68.34.27.dynamic.wlink.com.np |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 31.68.34.27.dynamic.wlink.com.np |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 35% | 2 | 2 |
| Overall | 24% | 7 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-29 10:34:09 UTC |
| Last Seen | 2026-08-02 10:53:51 UTC |
| Profile Built | 2026-07-30 21:36:12 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.