179.65.205.221📋 Copy

# IP Intelligence Briefing: 179.65.205.221

## Executive Summary

IP 179.65.205.221 presents a low-risk profile with a risk score of 25/100. The address is geolocated to London, GB, but control plane data indicates origin from ASN 45700 (PT. NAP Info Lintas Nusa, Indonesia). The IP is currently firewalled with no active services. While not flagged as a known attacker, the address appears on one DNSBL list with high severity, warranting continued monitoring.

## Risk Assessment

• Overall Risk Score: 25/100 (Low Risk)
• Reputation: Low Risk
• Abuse Confidence Score: Not applicable
• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

## Geolocation & Network Origin

• Geolocation: London, United Kingdom (GB)
• Timezone: Europe/London
• Origin ASN: 45700
• BGP Prefix: 179.65.204.0/23
• Route Stability: False (route changes observed in last 30 days)
• RPKI State: Not applicable
• IRR Consistency: Not applicable

## Service & Network Role Analysis

• Open Ports: None detected
• Service Purpose: Firewalled / No Services
• Infrastructure Type: Not classified
• Cloud Provider: No
• CDN: No
• VPN/Proxy: No
• Hosting: No
• Mobile/Residential: Classification pending

## Threat Intelligence Indicators

• DNSBL Listings: 1/8 total lists
• Maximum Severity: High
• Known Campaigns: None
• Threat Persistence: No
• Auto-Banned: No
• Honeypot Hits: 0
• WAF Violations: 0

## Neighborhood Analysis (179.65.205.0/24)

• Subnet Classification: Clean
• Abuse Density: 0
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor Risk Scores:

- 179.65.205.20: 25 (Low Risk)

- 179.65.205.184: 0 (No Risk)

## Observation History

Nine observations recorded, with the most recent activity dated 2026-07-29. Key signals include:

• DNSSEC validation: Valid
• PTR resolution: No reverse DNS record
• ASN attribution: 45700 (PT. NAP Info Lintas Nusa, ID)
• Listings: 8 total lists with 1 active listing at high severity

## Relationship Graph

No associated relationships detected (subnets, hostnames, organizations, or certificates).

## Recommended Actions

No automated firewall rules or security actions recommended based on current risk profile. The IP presents minimal immediate threat. However, the high-severity DNSBL listing warrants periodic review.

## SOC Analyst Notes

1. Monitor DNSBL listing status; removal from blacklist may indicate remediation

2. Route instability suggests potential BGP manipulation or transient routing issues

3. No active services detected; IP appears to be in standby or residential use

4. Neighborhood analysis shows low-risk adjacent addresses

5. No direct threats or attack indicators detected

Classification: LOW RISK - CONTINUE MONITORING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.