59.152.5.230📋 Copy

# IP Intelligence Briefing: 59.152.5.230

## Executive Summary

IP address 59.152.5.230 presents a Low Risk profile with an overall risk score of 25. The IP is assigned to Bangladesh's BANGLALINK network under APNIC RIR and currently operates in a firewalled state with no active services. While the subnet environment shows benign activity, the IP has been flagged in blacklist listings and shows a threat indicator from AlienVault OTX, warranting continued monitoring.

## Network Ownership & Geolocation

• ASN: 45245
• Organization: IRT-BANGLALINK-BD
• Network Name: BANGLALINK-BD
• CIDR Block: 59.152.0.0/21
• RIR: APNIC
• Geolocation: Dhaka, Bangladesh (BD)
• Country Consensus: Mixed (US reported by one source, BD by majority)
• Abuse Contact: PSCoreNetwork@banglalink.net

## Risk Assessment

• Overall Risk Score: 25/100 (Low)
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Abuse Confidence: Not applicable
• Known Attacker Status: False
• Tor Exit Node: False
• Spam Source: False
• Blacklist Count: 0 (current), 1 DNSBL listing active (8 total lists)
• Persistence: Not persistently malicious

## Threat Indicators

• DNSBL Listings: 1 active listing across 8 total blacklist feeds
• AlienVault OTX: Flagged with threat indicators (confidence 0.75)
• Campaign Correlation: No known campaign associations
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

## Service & Network Role

• Connection Type: Firewalled / No Services
• Cloud/CDN/Proxy: No
• Mobile/Residential: No
• Open Ports: None detected
• TLS Certificate: None
• HTTP Service: None
• DNS Resolution: No forward resolution confirmed; no PTR records

## Neighborhood Analysis (59.152.5.0/24)

• Subnet Abuse Density: 0 (clean)
• Total Neighbors: 6
• Risk Distribution: 0 High, 0 Medium, 6 Low
• Neighbor Risk Scores: All neighbors (59.152.5.6, .67, .88, .111, .164, .205) show riskScore: 0, authorityScore: 50
• Threat Siblings: 0

## Observation History

13 observations recorded on 2026-07-24:

• Ownership Signals: 0 changes observed; average ownership days: null
• RIR Registration: APNIC, organization IRT-BANGLALINK-BD confirmed
• Geolocation Signals: Multiple signals pointing to Dhaka, Bangladesh (confidence 0.95)
• Threat Signals: 1 threat indicator from AlienVault OTX (confidence 0.75)
• Blacklist Signals: 1 active listing with maximum severity "high" (confidence 0.85)

## Traceroute & Network Path

• Hop Count: 27
• First Hop RTT: 0.2ms
• Last Hop RTT: 271.4ms
• Timed Out Hops: 15
• Transit Networks: Comcast, NTT

## Recommended Actions

No immediate firewall or blocking actions are recommended based on current risk profile. The IP presents low overall risk with benign neighborhood activity. However, the following are suggested for enhanced security posture:

1. Monitor: Continue observing the IP for changes in service activity or threat indicators

2. Blocklists: Review the active DNSBL listing to determine source and relevance

3. Geolocation Validation: Investigate the

## Recommended Actions

No immediate firewall or blocking actions are recommended based on current risk profile. The IP presents low overall risk with benign neighborhood activity. However, the following are suggested for enhanced security posture:

1. Monitor: Continue observing the IP for changes in service activity or threat indicators

2. Blocklists: Review the active DNSBL listing to determine source and relevance

3. Geolocation Validation: Investigate the conflicting geolocation data (US vs BD signals) and validate against known infrastructure patterns

4. Threat Feeds: Monitor AlienVault OTX threat indicators for any escalation in severity

## Conclusion

IP 59.152.5.230 is assigned to Banglalink Bangladesh infrastructure and currently operates in a firewalled state with no active services. The network neighborhood demonstrates consistent benign behavior across all sibling IPs. While blacklisted in one feed with high severity designation, the overall threat profile remains low. No immediate action is required for SOC teams, but maintain passive monitoring for any behavioral changes or service emergence.

---

Classification: Low Risk

Last Updated: 2026-07-24

Intel Source: IPDebrief Threat Intelligence Platform

Status: Active Observation

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.