111.70.32.51📋 Copy

IP Intelligence Briefing: 111.70.32.51

Date: 2026-06-17

---

**1. Profile Summary**

• Risk Score: 80 (High Risk)
• Geolocation: Taipei, Taiwan (TW)
• Network Role: Web server (lighttpd/1.4.30)
• Services: Open ports 443 (HTTPS), 8080 (HTTP-alt). TLS certificate self-signed, issued to `CN=localhost`.
• Ownership: Unverified ASN (AS17421). No registered organization or abuse contact.

---

**2. Threat Indicators**

• No direct malware campaigns or spam sources detected.
• Subnet Abuse: 111.70.32.0/24 has 12/15 neighbors with high risk scores (80), indicating potential compromised hosts.
• DNS Associations: Linked to `hinet.net` (residential ISP), with SPF records but no DMARC.

---

**3. Observation History**

• Recent Activity (2026-06-17):

- TLS certificate validated (self-signed).

- DNS resolution confirmed for `111-70-32-51.emome-ip.hinet.net`.

- No new threat indicators detected in the last 30 days.

---

**4. Relationships**

• DNS: Resolves to `hinet.net` (residential ISP).
• Subnet: Part of 111.70.32.0/24, with 12 high-risk neighbors.
• Certificates: Self-signed TLS certificate (no SANs).

---

**5. Recommendations**

• Monitor Subnet: The 111.70.32.0/24 subnet has high abuse density (68.75%). Investigate neighbors with risk scores ≥80.
• Block Untrusted Traffic: Consider blocking traffic from this subnet in firewalls unless confirmed legitimate.
• Verify DNS: Validate `hinet.net` DNS records for spoofing or misconfiguration.
• Check TLS: Self-signed certificates may indicate internal or compromised services.

Next Steps: Correlate with internal logs, verify DNS source integrity, and assess subnet-wide risks.

---

*Generated by IPDebrief. All data sourced from observed signals and threat intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.