119.111.183.24📋 Copy

# IP Intelligence Briefing: 119.111.183.24/32

Classification: Low Risk — Passive Infrastructure

Date: 2026-07-30

---

## Executive Summary

IP address 119.111.183.24 exhibits a low-risk profile (Risk Score: 25) with no active services and minimal operator presence. The IP is associated with PDLT infrastructure in the Philippines and shows one DNSBL listing with high severity across eight monitored lists. No active threat indicators or attack campaigns were observed.

---

## Technical Profile

---

## Threat Indicators

• DNSBL Status: Listed on 1 of 8 monitored lists with high severity designation
• Threat Feeds: No active indicators detected
• Blacklist Count: 0 (no additional blacklist presence)
• Campaign Correlation: 0 correlated IPs, 0 certificate matches

---

## Observation History

Eleven observations recorded through July 30, 2026. Key temporal signals include:

• Geolocation consistently resolved to Davao City, Philippines
• Operator score maintained at minimal levels (0.1304–0.15)
• DNSBL listings persisted across multiple observation windows
• No ownership changes or threat persistence observed

---

## Infrastructure Context

Subnet Analysis:

• Neighborhood: 119.111.183.24/24
• Abuse Density: 0
• Sibling IPs: 0
• Risk Distribution: No sibling risk data available

Relationship Graph:

• Two DNS associations to: 119.111.183.24.static.pldt.net
• No additional entity links (organizations, certificates, subnets)

Network Behavior:

• No open ports detected
• No TLS certificates or HTTP services
• No WAF violations or honeypot hits
• Not classified as CDN, proxy, VPN, hosting, or cloud infrastructure

---

## Security Recommendations

Current Posture: No immediate action required. The IP presents a low-risk profile with passive infrastructure characteristics.

Monitoring Considerations:

• Track DNSBL listing status; one high-severity listing warrants periodic review
• Monitor for emergence of open services or service banners
• Consider correlation with other 119.111.0.0/16 addresses if traffic patterns suggest related infrastructure

Firewall Policy: Standard allow-deny rules apply. No specific block/allow rules generated due to low-risk classification.

---

Intelligence Confidence: Moderate — Geolocation consensus is false; limited subnet population data.

Reporting Officer: IPDebrief Intelligence Analysis Unit

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.