172.110.223.67📋 Copy

# IP Intelligence Briefing: 172.110.223.67/32

Classification: LOW RISK / MINIMAL THREAT

Report Date: Current Analysis Cycle

---

## Executive Summary

IP 172.110.223.67 presents a low-risk profile with no active threat indicators. The address operates in a firewalled state with no exposed services, and exhibits minimal behavioral anomalies. Neighborhood analysis indicates a relatively clean subnet environment with limited associated malicious activity.

---

## Risk Assessment

---

## Network Profile

Geolocation: Hong Kong (HK)

Organization: dedires (Abuse contact role object)

Network Block: 172.110.223.0/24

Registration RIR: ARIN

Network Classification:

• Connection Type: Firewalled / No Services
• Infrastructure: Not CDN, Cloud, VPN, Proxy, or Hosting
• Mobile Carrier: N/A

---

## Service Analysis

Open Ports: None detected

TLS Certificate: Not configured

HTTP Response: No active web services

DNS Resolution: No PTR records, forward resolution failed

Email Authentication: SPF/DMARC not configured

The IP address exhibits a firewalled posture with no publicly accessible services.

---

## Threat Indicators

---

## Neighborhood Analysis (172.110.223.0/24)

Subnet Statistics:

• Total Siblings: 21
• Active Siblings: 6
• Threat Siblings: 2
• Abuse Density: 9.52%

Risk Distribution:

• High Risk (0-50): 0 IPs
• Medium Risk (51-100): 4 IPs
• Low Risk (0-50): 16 IPs

Notable Neighbors with Elevated Risk:

• 172.110.223.157: Risk Score 40
• 172.110.223.179: Risk Score 40
• 172.110.223.199: Risk Score 40
• 172.110.223.203: Risk Score 40

---

## Historical Observation (16 Records)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

Signal Trends:

• Abuse density maintained at ~9.52%
• Classification consistently "mostly_clean"
• No escalation in threat posture observed
• Geographic inference points to Hong Kong (52% confidence)

---

## Relationship Graph

Limited external relationships detected. Only same-network associations with "dedires" network identifiers. No connections to:

• External organizations
• Registered hostnames
• SSL certificates
• Related infrastructure

---

## Control Plane

---

## Recommended Actions

Firewall/IDS Rules: No blocking recommended. IP presents minimal threat.

Monitoring: Standard monitoring applies. No elevated alerting required.

Investigation Priority: LOW

---

## Conclusion

IP 172.110.223.67 is a low-risk address with a firewalled operational posture. The subnet exhibits low abuse density, with only 2 of 21 sibling IPs flagged as threats. No active threat indicators, blacklist entries, or malicious behavior patterns detected. SOC teams may treat this address as benign with standard monitoring protocols.

---

Sources: IPDebrief Intelligence Platform

Data Confidence: High (multiple signal validations)

Last Updated: Current Analysis Cycle

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.