79.177.155.46📋 Copy

# IPDebrief Intelligence Briefing

Target: 79.177.155.46/32

Date: Current Analysis

Classification: Low Risk / Defensive Interest

---

## Executive Summary

IP 79.177.155.46 is a residential broadband endpoint belonging to Bezeq ISP infrastructure. The IP presents a low-risk profile (Risk Score: 25) with no active malicious indicators. However, the subnet demonstrates mixed risk characteristics, with neighboring IPs showing elevated risk scores. No open services detected; the IP is firewall-protected.

---

## Ownership & Infrastructure

Geolocation Discrepancy: Profile indicates Great Britain (London), but historical geolocation signals have identified Israel (Petach Tikva, Tel Aviv). This geographic inconsistency warrants monitoring but does not indicate malicious activity.

---

## Threat Indicators

• Overall Risk Score: 25 (Low Risk)
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threats: None detected in current profile
• Threat Persistence: 0 days (no persistent malicious activity)

Historical Anomaly: One historical observation (2026-07-27) flagged `has_threats: true` with 1 Pulse detection, suggesting transient activity that has since cleared.

---

## Neighborhood Analysis

Subnet: 79.177.155.0/24

Abuse Density: 0%

Total Siblings: 4

Risk Distribution: High: 0 | Medium: 2 | Low: 2

Notable Neighbors:

• 79.177.155.13: Risk Score 55 (Elevated)
• 79.177.155.74: Risk Score 40 (Moderate)
• 79.177.155.28: Risk Score 25 (Low)
• 79.177.155.91: Risk Score 25 (Low)

Assessment: The target IP's subnet shows moderate abuse density. Neighbor 79.177.155.13 presents elevated risk and should be monitored for potential correlation.

---

## Network Behavior

• Open Ports: None (Firewalled)
• TLS Certificate: None
• HTTP Services: None
• Traceroute: 30 hops, transit networks include Comcast and Cogent
• RTT: First hop 0.2ms, last hop 109.3ms
• Ownership Stability: 0 ownership changes observed

---

## Relationships

• DNS Associations: bzq-79-177-155-46.red.bezeqint.net
• Network Associations: BEZEQ-ISP-BROADBAND (2x)
• Related Entities: 4 total (all DNS and network mappings)

---

## Recommendations for SOC Analysts

1. Monitor Neighbor 79.177.155.13: This address shows a Risk Score of 55 and may correlate with the target IP's observed threat history.

2. Review DNSBL Listing: Investigate the single DNSBL listing to determine if it's a false positive or legitimate threat indicator.

3. Geolocation Verification: The country discrepancy (GB vs. IL) may indicate DNS spoofing or infrastructure misconfiguration. Verify with additional geolocation tools if this IP appears in incident logs.

4. Block Decision: Current data supports ALLOW traffic with standard monitoring. No immediate blocking recommended. The low-risk profile and residential designation suggest legitimate endpoint activity.

5. Long-term Watch: If this IP appears in incident reports, correlate with the elevated-risk neighbor (79.177.155.13) to assess potential subnet-wide compromise.

---

Confidence Level: High (based on 17 historical observations)

Data Freshness: Current as of analysis time

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.