49.156.103.177📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

## Target: 49.156.103.177/32

EXECUTIVE SUMMARY

IP address 49.156.103.177 is classified as LOW RISK with a risk score of 25/100. The IP is registered to AS17917 (QUADRANT-IN) within the APNIC region. No active threat indicators, known attack campaigns, or malicious reputation sources were identified. No firewall rules or blocking actions are recommended at this time.

OWNERSHIP & NETWORK CLASSIFICATION

• ASN: 17917 (QUADRANT-IN)
• Organization: Network Administrator Network Administrator
• CIDR Block: 49.156.64.0/18
• Country: India (IN)
• Region: Punjab
• Registration RIR: APNIC
• Network Classification: Firewalled / No Services

THREAT INTELLIGENCE

• Risk Score: 25/100 (Low Risk)
• Abuse Confidence Score: Not available
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Blacklist Count: 0
• Threat Feeds: None detected
• Known Campaigns: None associated

NETWORK BEHAVIOR

• Open Ports: None detected
• Services: No active services identified
• TLS Certificate: None
• HTTP Banner: None
• DNS Records: No forward resolution
• PTR Hostnames: None

CONTROL PLANE DATA

• BGP Prefix: 49.156.100.0/22
• Route Stability: False
• Route Changes (30d): 0
• MOAS: False
• DNSSEC: Valid
• DNSBL Listed: 1 of 8 total lists (minimal exposure)
• Operator Score: 0.1304 (Minimal)

GEOGRAPHIC VALIDATION

• Geolocation Consensus: True
• Plausibility: False
• Accuracy Radius: 1500km
• Multiple Sources: 1 source confirmed

OBSERVATION HISTORY

Analysis of historical signals shows 11 observations recorded. Most recent activity observed on 2026-07-22. Key observations include:

• Ownership/organization data consistent with APNIC registration
• No ownership changes detected
• No persistent malicious behavior
• Threat persistence days: 0
• Threat observation count: 0
• IP is not persistently malicious

RELATIONSHIP GRAPH

• Same Network: QUADRANT-IN
• Total relationships: 1

NEIGHBORHOOD ANALYSIS

• Subnet: 49.156.103.177/24
• Neighbor Count: 0
• Abuse Density: 0
• Risk Distribution: No high/medium/low risk siblings detected
• Active Threat Siblings: 0

SECURITY RECOMMENDATIONS

Based on current risk profile (25/100), no blocking or firewall rules are recommended. The IP shows minimal risk indicators:

• No active threat indicators
• No open ports or services
• No known attack associations
• Minimal DNSBL exposure (1/8 lists)

Recommended Actions:

• Monitor for changes in risk profile
• No immediate blocking required
• Standard logging and monitoring practices apply

---

*Intel generated by IPDebrief. Classification: DEFENSIVE SECURITY INTELLIGENCE.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.