# 172.110.223.67 — IP Intelligence Summary

172.110.223.67 is an IPv4 address operated by Abuse contact role object, geolocated to New York, Hong Kong. As of September 10, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/172.110.223.67
- Last updated: 2026-09-10

## Ownership

- Organization: Abuse contact role object
- Network name: dedires
- Allocated block: 172.110.223.0/24
- ASN: —
- Regional registry: ARIN

## Location

- City: New York
- Region: US-NY
- Country: Hong Kong
- Time zone: Asia/Hong_Kong

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 172.110.223.67/32

**Classification:** LOW RISK / MINIMAL THREAT

**Report Date:** Current Analysis Cycle

\---

\## Executive Summary

IP 172.110.223.67 presents a low-risk profile with no active threat indicators. The address operates in a firewalled state with no exposed services, and exhibits minimal behavioral anomalies. Neighborhood analysis indicates a relatively clean subnet environment with limited associated malicious activity.

\---

\## Risk Assessment

| Metric | Value | Assessment |

|--------|-------|------------|

| Overall Risk Score | 0 | Low Risk |

| Provider Score | 0 | Minimal |

| Authority Score | 0 | Minimal |

| Reputation | Low Risk | Clean |

| Abuse Confidence | N/A | Not Applicable |

| Blacklist Count | 0 | Clean |

\---

\## Network Profile

**Geolocation:** Hong Kong (HK)

**Organization:** dedires (Abuse contact role object)

**Network Block:** 172.110.223.0/24

**Registration RIR:** ARIN

**Network Classification:**

\- Connection Type: Firewalled / No Services

\- Infrastructure: Not CDN, Cloud, VPN, Proxy, or Hosting

\- Mobile Carrier: N/A

\---

\## Service Analysis

**Open Ports:** None detected

**TLS Certificate:** Not configured

**HTTP Response:** No active web services

**DNS Resolution:** No PTR records, forward resolution failed

**Email Authentication:** SPF/DMARC not configured

The IP address exhibits a firewalled posture with no publicly accessible services.

\---

\## Threat Indicators

| Indicator | Status |

|-----------|--------|

| Tor Exit Node | No |

| Known Attacker | No |

| Spam Source | No |

| Known Campaigns | None |

| WAF Violations | 0 |

| Enumeration Strikes | 0 |

| Honeypot Hits | 0 |

\---

\## Neighborhood Analysis (172.110.223.0/24)

**Subnet Statistics:**

\- Total Siblings: 21

\- Active Siblings: 6

\- Threat Siblings: 2

\- Abuse Density: 9.52%

**Risk Distribution:**

\- High Risk (0-50): 0 IPs

\- Medium Risk (51-100): 4 IPs

\- Low Risk (0-50): 16 IPs

**Notable Neighbors with Elevated Risk:**

\- 172.110.223.157: Risk Score 40

\- 172.110.223.179: Risk Score 40

\- 172.110.223.199: Risk Score 40

\- 172.110.223.203: Risk Score 40

\---

\## Historical Observation (16 Records)

**Temporal Analysis:**

\- Ownership Changes: 0

\- Threat Persistence Days: 0

\- Threat Observation Count: 0

\- Persistently Malicious: No

**Signal Trends:**

\- Abuse density maintained at ~9.52%

\- Classification consistently "mostly_clean"

\- No escalation in threat posture observed

\- Geographic inference points to Hong Kong (52% confidence)

\---

\## Relationship Graph

Limited external relationships detected. Only same-network associations with "dedires" network identifiers. No connections to:

\- External organizations

\- Registered hostnames

\- SSL certificates

\- Related infrastructure

\---

\## Control Plane

| Parameter | Value |

|-----------|-------|

| Route Stability | False |

| MOAS | No |

| DNSSEC Valid | Yes |

| DNSBL Listed | 0 / 8 total lists |

| Operator Score | 0.1304 (Minimal) |

| Transit Network | Comcast |

| Hop Count | 11 |

| Last Hop RTT | 29.2ms |

\---

\## Recommended Actions

**Firewall/IDS Rules:** No blocking recommended. IP presents minimal threat.

**Monitoring:** Standard monitoring applies. No elevated alerting required.

**Investigation Priority:** LOW

\---

\## Conclusion

IP 172.110.223.67 is a low-risk address with a firewalled operational posture. The subnet exhibits low abuse density, with only 2 of 21 sibling IPs flagged as threats. No active threat indicators, blacklist entries, or malicious behavior patterns detected. SOC teams may treat this address as benign with standard monitoring protocols.

\---

**Sources:** IPDebrief Intelligence Platform

**Data Confidence:** High (multiple signal validations)

**Last Updated:** Current Analysis Cycle

## Nearby addresses

- 172.110.223.34 (https://ipdebrief.com/172.110.223.34)
- 172.110.223.59 (https://ipdebrief.com/172.110.223.59)
- 172.110.223.61 (https://ipdebrief.com/172.110.223.61)
- 172.110.223.72 (https://ipdebrief.com/172.110.223.72)
- 172.110.223.73 (https://ipdebrief.com/172.110.223.73)
- 172.110.223.79 (https://ipdebrief.com/172.110.223.79)
- 172.110.223.84 (https://ipdebrief.com/172.110.223.84)
- 172.110.223.87 (https://ipdebrief.com/172.110.223.87)
- 172.110.223.90 (https://ipdebrief.com/172.110.223.90)
- 172.110.223.98 (https://ipdebrief.com/172.110.223.98)
- 172.110.223.99 (https://ipdebrief.com/172.110.223.99)
- 172.110.223.114 (https://ipdebrief.com/172.110.223.114)

---

Source: IPDebrief, "172.110.223.67 IP intelligence", https://ipdebrief.com/172.110.223.67, updated 2026-09-10. Assessments are probabilistic.
