50.72.154.194📋 Copy

# IP Intelligence Briefing: 50.72.154.194/32

Classification: Low Risk | Provider: Shaw Communications | Location: Winnipeg, MB, Canada

## Executive Summary

IP 50.72.154.194 is a Shaw Communications residential cable infrastructure address classified as low risk (risk score: 25). The IP is currently firewalled with no active services, operating within a clean subnet with zero abuse density. No threat indicators or malicious activity observed.

## Risk Profile

• Risk Score: 25 (Low Risk)
• Reputation: Low Risk
• Abuse Confidence: Not applicable (no active threats)
• Provider/Authority Scores: 0 (residential cable infrastructure)
• Blacklist Status: 1 of 8 DNSBL lists (minor flag)

## Ownership & Network Context

• Organization: Shaw Communications (SHAW-COMM)
• ASN: 6327
• CIDR Block: 50.64.0.0/13
• Registration: ARIN
• Geolocation: Winnipeg, Manitoba, Canada (53.76°N, 98.81°W)
• Contact: internet.abuse@sjrb.ca

## Network Behavior & Services

• Service Status: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: S0106e4bffa3afb3b.wp.shawcable.net
• Email Auth: SPF and DMARC records present
• Route Stability: Unstable (route changes observed)
• Control Plane: DNSSEC valid, CAA records absent

## Threat Indicators

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None detected
• Threat Feeds: Clean
• Historical Threat Persistence: None observed

## Observation History

18 observations recorded. Most recent data from July 27, 2026 shows:

• Consistent ownership under Shaw Communications
• Classification maintained as "clean"
• No ownership changes detected
• No threat persistence observed
• Subnet abuse density: 0

## Neighborhood Analysis

• Subnet: 50.72.154.194/24
• Abuse Density: 0 (clean)
• Threat Siblings: 0
• Active Siblings: 1
• Risk Distribution: Zero high/medium risk neighbors

## Related Entities

DNS associations point to hostname: S0106e4bffa3afb3b.wp.shawcable.net. No additional related hostnames, organizations, or certificates identified beyond Shaw Communications network infrastructure.

## Recommended Actions

• No immediate blocking required.
• Monitor: Track DNSBL listing status for potential false positive resolution.
• Logging: Standard logging recommended; no specific firewall rules necessary.

## Intelligence Assessment

This IP represents legitimate residential cable infrastructure with no active malicious indicators. The single DNSBL listing warrants monitoring but does not indicate current threat activity. The IP is appropriate for allow-listing with standard logging, provided organizational policy permits traffic from residential cable providers.

Status: Low Risk — Monitor, No Action Required

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.