110.76.144.79📋 Copy

## THREAT INTELLIGENCE BRIEFING

Target: 110.76.144.79/32

Date: 2026-07-27

Risk Classification: Moderate Risk (55/100)

Source: IPDebrief Intelligence Platform

---

EXECUTIVE SUMMARY

IP 110.76.144.79 is a single-service host located in Indonesia with a moderate risk score of 55. The address is assigned to IRT-PIKANET-ID (ASN 140481) within the 110.76.144.0/24 network block. While no active threat indicators or known campaigns were detected, the IP is DNSBL-listed on three of eight monitored blacklists and demonstrates route instability with one BGP prefix change in the past 30 days.

---

TECHNICAL PROFILE

Ownership and Registration:

• ASN: 140481 (IRT-PIKANET-ID)
• Network: T2 (110.76.144.0/24)
• RIR: APNIC
• Abuse Contact: abuse@pika.net.id

Network Services:

• Open Port: 80/tcp (HTTP)
• HTTP Version: 1.1
• Response Time: 804ms
• HTTP Fingerprint: Status code 200, header order includes "connection" and "date"

DNS Configuration:

• PTR Hostname: 79.sub144.t2.net.id
• Forward Resolution: Confirmed
• SPF/DMARC: Not configured
• Domain: net.id

---

THREAT INTELLIGENCE

Risk Indicators:

• Risk Score: 55/100 (Moderate)
• DNSBL Listings: 3 of 8 monitored lists
• Route Stability: Unstable (1 change in 30 days)
• Operator Score: 0.2174 (Minimal)

Threat Classification:

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Association: None detected
• Malicious Persistence: No

Control Plane Data:

• BGP Prefix: 110.76.144.0/24
• AS Path: 2914 → 138840 → 140481
• RPKI State: Not validated
• DNSSEC: Valid
• IRR Consistency: Not assessed

---

NETWORK CONTEXT

Subnet Analysis (110.76.144.0/24):

• Neighbor Count: 0
• Abuse Density: 0%
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0
• Threat Siblings: 0

Relationship Graph:

• DNS Associations: 79.sub144.t2.net.id (3 entries)
• Network Associations: T2
• No external organization or certificate associations detected

---

HISTORICAL ANALYSIS

Observation Period: 19 signals recorded

Most Recent Activity: 2026-07-27T19:50:47

Temporal Trends:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Is Persistently Malicious: No

Service Observations:

• HTTP service detected with 200 status code
• robots.txt configured with "Disallow: /"
• No HSTS, CSP, or referrer policy headers
• No HTTP/2 support

---

RECOMMENDED ACTIONS

Immediate Actions:

1. Increase Logging: Implement elevated logging verbosity for traffic from 110.76.144.79

2. Review Activity: Analyze recent activity patterns from this IP address

Firewall Rules:

• iptables: `iptables -A INPUT -s 110.76.144.79 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 110.76.144.79 drop`
• nginx: `deny 110.76.144.79;`
• pfSense: 110.76.144.79/32
• Cloudflare WAF: Block with expression `ip.src eq 110.76.144.79`
• AWS WAF: Address `110.76.144.79/32`

Priority: High (due to elevated risk score of 55/100)

---

Conclusion: The IP exhibits moderate risk characteristics primarily due to DNSBL listings and BGP route instability. No active malicious indicators were detected. Implement monitoring and consider blocking based on organizational risk tolerance thresholds.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.