112.199.192.139📋 Copy

# IP Intelligence Briefing: 112.199.192.139

## Executive Summary

IP address 112.199.192.139 is classified as High Risk with a risk score of 80/100. The IP belongs to ASN 4773 (M1 Hostmaster) under the Mobile-Broadband network, located in Singapore (SG). Despite the elevated risk rating, the IP shows no active open ports, no known threat indicators, and zero blacklist matches. Recommended action: Block or monitor closely.

## Technical Profile

## Threat Indicators

• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Threat Feeds: Empty
• Abuse Confidence Score: Not available

## Network Context

Subnet Analysis: The IP resides in subnet 112.199.192.139/24 with:

• Abuse Density: 0 (clean classification)
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

Neighboring IPs: No additional sibling IPs identified in the immediate /24 range.

## Relationship Graph

The IP maintains associations with:

• Network: Mobile-Broadband (multiple same-network entries)
• DNS Hostnames: 139.192.199.112.unknown.m1.com.sg (multiple DNS associations)

No organizational or certificate relationships detected.

## Historical Activity

• Observation Count: 17 signals
• Recent Activity: Multiple observations from 2026-07-28
• Ownership Changes: 0
• Threat Observation Count: 0
• Persistence Status: Not persistently malicious
• Operator Score: 0.1304 (Minimal)

The IP has demonstrated consistent network classification with no significant temporal shifts in threat posture.

## Recommended Actions

Immediate Recommendations

1. Block Traffic: Implement firewall rules to drop all traffic from this IP

2. Increase Logging: Enable verbose logging for any observed traffic from this subnet

Firewall Rules

## Assessment Notes

Despite the elevated risk score of 80, the IP shows minimal malicious characteristics:

• No open ports or active services
• No threat indicators or blacklist matches
• Clean subnet environment with no threat siblings
• Operator score classified as "Minimal"

The high risk rating appears to be based on network classification flags rather than active malicious behavior. Recommend blocking as a precautionary measure while monitoring for any activity.

---

*Intelligence generated by IPDebrief. Recommendations should be validated with additional signals before enforcement.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.