111.223.191.246
IP INTELLIGENCE BRIEFING: 111.223.191.246/32
Executive Summary
IP address 111.223.191.246 was analyzed on 2026-07-29. The address presents as a low-risk, benign endpoint with no active threat indicators detected.
Network Profile & Classification
The IP originated from ASN 18001 within BGP prefix 111.223.128.0/18. Geolocation data indicates Sri Lanka (LK), Western Province, Dehiwala. The address is classified as firewalled with no active services exposed. No open ports were detected during service scanning. DNS infrastructure is absent: no PTR hostnames, no forward resolution, and no email authentication records (SPF/DMARC).
Threat Assessment
Risk scoring returned zero across provider, authority, and stability dimensions. The IP is not flagged as a Tor exit node, known attacker, or spam source. Blacklist enumeration returned zero entries. Threat feed analysis yielded no indicators. The IP does not exhibit characteristics associated with proxy, CDN, or hosting infrastructure.
Temporal Analysis
Historical observation tracking identified 10 signals. The most recent activity occurred on 2026-07-29 at 03:32 UTC. Neighborhood classification for /24 subnet 111.223.191.246/24 reported "clean" classification with zero abuse density. No threat persistence was observed, and ownership remained stable.
Relationships & Lateral Movement
Relationship graph analysis returned no associated entities. No correlated hostnames, organizations, subnets, or certificates were identified. The absence of relationship indicators suggests limited integration into broader malicious infrastructure ecosystems.
Neighborhood Context
Subnet analysis for 111.223.191.246/24 showed zero neighboring IPs in the dataset, with no threat-adjacent siblings detected. The subnet-level abuse density scored zero.
Recommended Actions
No firewall rules or blocking recommendations generated. The IP presents no actionable threat requiring SOC intervention at this time. Standard monitoring procedures remain appropriate.
Conclusion
IP 111.223.191.246 exhibits benign network behavior with no malicious indicators. The address may be safely permitted through network security controls under current threat intelligence parameters.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ip noc |
| ASN | AS18001 |
| Network Name | DIALOG-LK |
| CIDR Block | 111.223.128.0/18 |
| RIR | APNIC |
| Country | LK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS18001 |
| Network Prefix | 111.223.128.0/18 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-20 18:35:12 UTC |
| Last Seen | 2026-09-02 19:35:19 UTC |
| Profile Built | 2026-09-02 19:48:35 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 111.223.191.246
Who owns the IP address 111.223.191.246?
111.223.191.246 is registered to ip noc. The address falls within the 111.223.128.0/18 network block. Registration is held at APNIC.
Where is 111.223.191.246 located?
Geolocation data places 111.223.191.246 in London, Western Province, United Kingdom. The local time zone is Europe/London. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 111.223.191.246 malicious or safe?
111.223.191.246 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.