110.25.115.52📋 Copy

# IP Intelligence Briefing: 110.25.115.52/32

## Executive Summary

IP address 110.25.115.52 is assigned to Jeff Ho under ASN 9674 (FEG-MPLS-NETWORK-NET) in Taiwan. The address presents a moderate risk profile (40/100) with no active threat indicators. The subnet shows clean classification with zero abuse density and no threat siblings.

## Ownership and Registration

• ASN: 9674
• Organization: Jeff Ho
• Network Name: FEG-MPLS-NETWORK-NET
• CIDR Block: 110.25.0.0/16
• RIR: APNIC
• Geolocation: Taiwan (23.7°N, 120.96°E)
• Timezone: Asia/Taipei

## Network Characteristics

• Classification: Firewalled / No Services
• Open Ports: None detected
• DNS Records: PTR resolves to 110-25-115-52.adsl.fetnet.net
• Forward Resolution: Confirmed to fetnet.net
• Email Authentication: SPF record present; DMARC absent
• DNSSEC: Valid

## Threat Assessment

Risk Score: 40 (Moderate Risk)

Threat Indicators:

• No known attacker signatures
• No Tor exit node activity
• No spam source classification
• Zero blacklist entries at time of analysis
• No associated threat campaigns

Control Plane Data:

• DNSBL listings: 2 of 8 total lists
• Route stability: False (route changes detected)
• Operator Score: 0.2609 (Basic)

## Temporal Analysis

• Ownership Changes: None recorded
• Threat Persistence: Not persistently malicious
• Threat Observation Count: 0
• Recent Activity: 16 historical observations tracked

## Neighborhood Analysis

• Subnet: 110.25.115.52/24
• Abuse Density: 0 (clean)
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 0
• Risk Distribution: High: 0, Medium: 0, Low: 0

## Relationship Graph

• DNS Associations: 110-25-115-52.adsl.fetnet.net (repeated entries)
• Network Association: FEG-MPLS-NETWORK-NET

## Recommended Actions

No immediate blocking or allowlisting actions recommended. The IP shows no active malicious behavior, no open services, and a clean neighborhood profile. Monitor for any changes in threat indicators or service deployment.

## Intelligence Narrative

The IP address 110.25.115.52 is a residential or small-business IP in Taiwan with a moderate risk classification primarily driven by DNSBL listings (2/8). However, operational indicators show no active services, no threat signatures, and a clean subnet environment. The moderate risk score should not be treated as an immediate threat requiring blocking. The IP's static nature (no ownership changes, no threat persistence) combined with the absence of open ports and zero threat indicators suggests legitimate usage. SOC analysts may observe this IP but should prioritize monitoring over active mitigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.