110.139.16.73📋 Copy

# IP Intelligence Briefing: 110.139.16.73/32

## Executive Summary

IP address 110.139.16.73 is a low-risk (Risk Score: 15) infrastructure endpoint associated with PT Telkom Indonesia telecommunications network. The IP shows minimal threat indicators with no active services, making it unlikely to be a source of malicious activity. However, the address is listed on one DNSBL, warranting routine monitoring.

## Ownership and Infrastructure

• ASN: AS7713 (PT Telkom Indonesia APNIC Resources Management)
• Network: TLKM_BB_INF_110_139 / 110.139.0.0/19
• Location: Tangerang, Indonesia (Region: BT)
• Classification: Infrastructure / Firewalled
• Services: None detected (open ports: 0)

## Threat Assessment

• Overall Risk Score: 15 (Low Risk)
• Abuse Confidence: Not elevated
• Known Campaigns: None identified
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Tor Exit/Proxy: No
• Known Attacker: No

## Network Neighborhood Analysis

• Subnet: 110.139.16.0/24
• Abuse Density: 0.0 (Clean)
• Active Threat Siblings: 0
• Neighbor Risk Distribution: No high/medium/low risk neighbors detected

## Observation History (14 signals)

Recent observations from 2026-07-29 indicate:

• ASN AS7713 consistently identified with 0.75 confidence
• Geographic validation confirms Indonesia location (Tangerang)
• One signal flagged `has_threats: true` with 2 pulse indicators
• Service scans confirmed no open ports
• Operator score: 0.1304 (Minimal)

## Control Plane Status

• BGP Prefix: 110.139.16.0/22
• Route Stability: False
• RPKI State: Not validated
• DNSSEC: Valid

## Recommended Security Actions

No specific firewall rules or blocking recommendations generated. The low risk profile (15/100) and absence of actionable threat indicators suggest routine monitoring is sufficient. However, the single DNSBL listing warrants inclusion in standard allow/deny lists for review.

## Intelligence Narrative

This IP belongs to Indonesia's primary telecommunications infrastructure (PT Telkom). The address is firewalled with no exposed services, which explains the low risk profile. The 1 DNSBL listing appears to be a false positive or administrative listing given the otherwise clean profile. No malicious activity patterns, campaigns, or coordinated threats were observed. SOC teams may monitor this IP for baseline network traffic patterns but no immediate blocking or investigation is warranted.

---

*Report generated: 2026-07-29 | Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.