112.203.56.85📋 Copy

# IP Intelligence Briefing: 112.203.56.85/32

Classification: Low Risk / Consumer Mobile Traffic

---

## Executive Summary

IP address 112.203.56.85 is a low-risk Philippine residential/mobile consumer endpoint belonging to PLDT's ISP infrastructure. The address exhibits no active malicious behavior, no threat indicators, and represents standard mobile broadband traffic from Metro Manila. No immediate defensive actions required beyond standard network hygiene.

---

## Technical Profile

Ownership & Network Classification:

• ASN: 9299 (IRT-PLDT-PH)
• Organization: IRT-PLDT-PH
• CIDR Block: 112.203.0.0/17
• Network Type: Consumer_DSL
• Geolocation: Philippines, Metro Manila, Caloocan
• Mobile Carrier: PLDT/Smart (Philippine Long Distance Tel.)
• Technology: LTE/5G
• Mobile Classification: Yes

Risk Metrics:

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Reputation: Low Risk

DNS Resolution:

• PTR Hostname: 112.203.56.85.pldt.net
• Forward Resolution: 112.203.56.85.pldt.net
• Domain: pldt.net
• Forward Confirmation: Confirmed

Network Services:

• Open Ports: None detected
• HTTP Banner: None
• TLS Certificate: None
• Service Purpose: Firewalled / No Services

---

## Threat Intelligence Assessment

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Known Campaigns: None
• Abuse Confidence Score: Not applicable

Control Plane Analysis:

• BGP Prefix: 112.203.32.0/19
• Route Stability: Unstable
• DNSBL Listing: 1 out of 8 total lists
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not available

Email Reputation:

• SPF Record: Not configured
• DMARC Record: Not configured
• Sender Score: Not applicable

---

## Relationship Graph Analysis

Connected Entities:

• Network Association: Consumer_DSL (PLDT network)
• DNS Associations: 112.203.56.85.pldt.net (3 instances)

Campaign Correlation:

• Campaign Likelihood: None
• Cert Matches: 0
• Correlated IPs: 0

---

## Neighborhood Analysis

Subnet: 112.203.56.85/24

• Total Neighbors: 1
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• Subnet Classification: Low Risk

Neighbor Profile:

• 112.203.56.184: Risk Score 25, Authority Score 50 (Low Risk)

---

## Historical Signal Observation

Observation Timeline: 17 total observations (latest: 2026-07-30)

Recent Signal Types:

• Ownership Signals: ASN, RIR, organization data (90-95% confidence)
• Geolocation Signals: Country PH (52% confidence, 600km accuracy)
• Network Role Signals: Consumer mobile classification (30% confidence)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

---

## Security Recommendations

Firewall & Access Control:

• No specific firewall rules recommended
• No active threat mitigation strategies required
• Standard network baseline rules apply

Threat Intelligence:

• Action Level: Monitor / Low Priority
• Risk Classification: Benign consumer endpoint
• Recommended Action: No immediate action required; treat as standard residential/mobile traffic

---

## Intelligence Summary

IP 112.203.56.85 represents a legitimate PLDT mobile broadband connection from the Philippines. The endpoint shows no evidence of malicious activity, hosting services, or abuse patterns. The single DNSBL listing appears to be a false positive or non-critical listing given the overall low risk profile. The IP should be treated as standard consumer traffic requiring no special handling beyond routine network operations.

Confidence Level: High (based on complete profile data and neighborhood analysis)

Last Updated: 2026-07-30

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.