Intelligence Briefing: 78.22.112.190/32
Ownership and Location
The IP address was registered to Technical Internet (TELENET), ASN 6848, within the RIPE region. Geolocation data places the asset in New York, US, with a PTR hostname resolving to `78-22-112-190.access.telenet.be`.
Threat Profile
The address is classified as High Risk with a risk score of 70. It is categorized as Campaign Infrastructure and correlates with 39 additional IP addresses. Despite the high risk score, the asset presents no open ports, no active services, and zero blacklisted indicators. DNS hygiene is rated Excellent with valid SPF, DMARC, and CAA records, though one DNSBL listing was detected.
Recommendation
The system recommends blocking the address with Critical Severity. This decision is based on a high risk score with strong threat evidence.
Firewall Implementation
The following rules were generated for immediate mitigation:
* iptables: `iptables -A INPUT -s 78.22.112.190 -j DROP`
* Nginx: `deny 78.22.112.190;`
* pf: `block in quick on egress from 78.22.112.190`
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Technical Internet |
| ASN | AS6848 |
| Network Name | TELENET |
| CIDR Block | 78.22.0.0/16 |
| RIR | RIPE |
| Country | BE |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 78-22-112-190.access.telenet.be |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 78-22-112-190.access.telenet.be |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-26 22:45:07 UTC |
| Last Seen | 2026-09-26 22:45:07 UTC |
| Profile Built | 2026-09-26 23:01:52 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.