144.79.187.20📋 Copy

IP Intelligence Briefing: 144.79.187.20/32

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership: Owned by IRT-IDNIC-ID (ASN 138000), registered to IANA-BLOCK.
• Geolocation: Jakarta Selatan, Indonesia (ID).
• Network Role: Firewalled / No Services (no open ports, TLS, or HTTP detected).
• Threat Indicators: No direct malicious activity (no indicators, blacklists, or campaigns).

---

**2. Observation History**

• Last Observed: June 17, 2026 (abuse density: 56.25%, classification: high_abuse).
• Historical Context: Single observation from June 2, 2026, with low confidence (0.30).
• Geo Validation: Plausible in Indonesia (1500km accuracy radius).

---

**3. Relationships**

• Network Affiliation: Linked to IANA-BLOCK (reserved IP range).
• Subnet: Part of 144.79.187.0/24, with 16 sibling IPs.
• Threat Neighbors: 9 of 16 siblings flagged as threats (risk score: 40).

---

**4. Neighborhood Analysis**

• Subnet Abuse Density: 56.25% (high_abuse classification).
• Neighbor Risk: All siblings have identical risk/authority scores (40/50).
• Potential Vulnerability: High-risk subnet suggests possible lateral movement or compromised environment.

---

**5. Recommendations**

• Monitor Subnet: Track activity in 144.79.187.0/24 for unusual traffic patterns.
• Block Neighbors: Consider blocking the high-risk siblings if this IP is under attack.
• Verify Ownership: Confirm IRT-IDNIC-ID’s role in this subnet (potential misconfiguration?).
• Geolocation Checks: Validate if traffic from this IP aligns with legitimate Indonesia-based operations.

---

Conclusion: While the IP itself lacks direct threat indicators, its subnet exhibits high abuse density. SOC teams should prioritize monitoring the broader network and investigate potential lateral movement risks.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.