49.156.106.64📋 Copy

# IP Intelligence Briefing: 49.156.106.64/32

## Executive Summary

IP address 49.156.106.64/32 presents a low-risk profile with a risk score of 15. The address is geolocated to Jalandhar, Punjab, India (AS17917) and operates within the 49.156.104.0/22 BGP prefix. No active threat indicators, open services, or malicious relationships were identified during assessment.

## Threat Profile

• Risk Score: 15 (Low Risk)
• Reputation: Low Risk
• Threat Indicators: None detected
• Blacklist Status: 0 blacklists
• DNSBL Listings: 1 of 8 total lists
• Campaign Affiliation: None identified
• Known Attacker Status: Negative

## Geolocation & Ownership

• Country: India (IN)
• Region: Punjab
• City: Jalandhar
• ASN: 17917
• BGP Prefix: 49.156.104.0/22
• RIR: APNIC
• Organization: Network Administrator Network Administrator
• Abuse Contact: ispnochfcl@infotelconnect.com

## Network Characteristics

• Services: None (Firewalled / No Services)
• Open Ports: None detected
• TLS Certificates: None
• DNS Records: No PTR hostnames, no forward resolution
• Email Authentication: No SPF, DMARC, or TXT records
• Control Plane: Route stability flagged as false; DNSSEC valid

## Neighborhood Assessment

• Subnet: 49.156.106.64/24
• Abuse Density: 0%
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 0
• Active Siblings: 0

## Historical Observations

Ten observations recorded as of 2026-07-22. Signals indicate consistent APNIC registration and geolocation data from India. Operator score classified as "Minimal" (0.1304). No ownership changes or persistent malicious behavior detected.

## Security Actions

No specific firewall rules or blocking recommendations generated. The IP's low-risk profile suggests standard monitoring is appropriate rather than restrictive measures.

## Intelligence Assessment

The IP address exhibits characteristics of a legitimate, lightly-utilized infrastructure endpoint. The absence of open services, threat indicators, or malicious relationships suggests this is either a residential or low-traffic infrastructure address. The single DNSBL listing appears isolated and does not correlate with broader threat activity. SOC teams may treat this address as low-priority for monitoring purposes.

---

*Data compiled from IPDebrief intelligence sources. Assessment based on current observable signals and historical data.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.