118.100.169.119📋 Copy

THREAT INTELLIGENCE BRIEFING

IP Address: 118.100.169.119/32

Analysis Date: 2026-07-29

Classification: MODERATE RISK

---

EXECUTIVE SUMMARY

IP 118.100.169.119 is a mobile carrier address from Telekom Malaysia (TM) with a moderate risk score (50). No active threat indicators, blacklist entries, or malicious activity were detected. The IP is classified as mobile (5G/LTE connection) with no open services detected.

---

OWNERSHIP & GEOLOCATION

• Organization: TM TECHNOLOGY SERVICES SDN BHD
• Network: 118.100.0.0/15 (TTSSB-MY)
• ASN: 4788
• Location: Kuala Lumpur, Malaysia (MY)
• ISP: Telekom Malaysia Berhad (Carrier: TM, MCC: 502, MNC: 19)
• Technology: LTE/5G Mobile Connection

---

THREAT INDICATORS

• Risk Score: 50 (Moderate)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Known Campaigns: None detected

---

NETWORK SERVICES

• Open Ports: None detected
• HTTP/HTTPS: No services running
• TLS Certificate: None
• DNS: No reverse or forward resolution
• Status: Firewalled / No Services

---

CONTROL PLANE DATA

• Route Stability: Unstable (route changes observed)
• DNSBL Listed: 2 of 8 total lists
• BGP Prefix: 118.100.128.0/18
• Origin ASN: 4788

---

HISTORY ANALYSIS

• Observations: 17 total signals recorded
• Recent Classification: Clean (0 abuse density)
• Ownership Changes: 0 (stable ownership)
• Threat Persistence: 0 days
• Persistent Malicious Activity: None detected

---

NEIGHBORHOOD ANALYSIS

• Subnet: 118.100.169.119/24
• Abuse Density: 0
• Threat Siblings: 0
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 0

---

RELATIONSHIPS

• Same Network: 4 relationships to TTSSB-MY
• External Entities: None detected
• Correlated IPs: 0

---

SOC ACTIONABLE INTELLIGENCE

RISK ASSESSMENT:

The moderate risk score (50) is primarily attributable to mobile IP classification rather than confirmed malicious activity. The IP shows no threat indicators and maintains a clean profile across all observation periods.

RECOMMENDED ACTIONS:

1. ALLOW traffic from this IP unless specific incident correlation exists

2. NO BLOCKING recommended at this time

3. MONITOR for behavioral anomalies given mobile carrier nature

4. LOG connection attempts for forensic correlation

THREAT CONTEXT:

This IP represents legitimate mobile network infrastructure. The moderate risk classification is typical for mobile carrier addresses. No evidence of abuse, scanning, or malicious activity was detected. The IP operates within a clean neighborhood with zero abuse density and no threat siblings.

CONCLUSION:

No immediate threat action required. Continue standard monitoring procedures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.