114.111.52.187📋 Copy

IP Intelligence Briefing: 114.111.52.187

Date: 2026-06-10

---

**1. Risk Profile**

• Risk Score: 50 (Moderate Risk)
• Provider: APNIC (ASN 54994)
• Organization: IP Manager (CDNETWORKS-KR)
• Geolocation: South Korea (KR), Latitude 37.51, Longitude 126.97
• Threat Indicators: No active malicious indicators (no malware, phishing, or C2 activity).

---

**2. Network & Ownership**

• Subnet: 114.111.52.0/24 (part of CDNETWORKS-KR)
• Registration: APNIC, registered to "IP Manager" (hostmaster@nic.or.kr).
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services detected).
• BGP: Route stable, no recent changes. DNSSEC validated.

---

**3. Threat Observations (Last 30 Days)**

• DNSBL Listings (8 lists): 1 high-severity listing (confidence 0.85).
• DNSSEC: Minimal issues (confidence 0.30).
• Ownership Stability: No ownership changes.
• Threat Persistence: No persistent malicious activity.

---

**4. Relationships & Neighbors**

• Linked Entities: Same network "CDNETWORKS-KR" (no other direct relationships).
• Neighbors (114.111.52.0/24):

- 114.111.52.109 (Risk: 50)

- 114.111.52.185 (Risk: 50)

• Subnet Abuse Density: 0% (no malicious activity in neighbors).

---

**5. Analysis & Recommendations**

• No Direct Threat: No confirmed malicious activity (no malware, C2, or phishing indicators).
• Monitor DNSBL Listings: The IP is listed in 8 DNSBLs, though with high confidence. Verify if these are false positives or part of a larger campaign.
• Network Context: Likely a private/internal IP (firewalled, no services exposed). Verify if it belongs to a legitimate organization or is part of a compromised network.
• No Immediate Action Required: No actionable rules or firewall mitigations needed, but continued monitoring of DNS and network behavior is advised.

---

Product: IPDebrief | Copyright: © 2026 Jason Alberino. All rights reserved.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.