180.178.111.58📋 Copy

# IP Intelligence Briefing: 180.178.111.58

Classification: Moderate Risk

Date: July 25, 2026

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 180.178.111.58 is a Tier-1 infrastructure network belonging to IRT-HYPERNET-ID (ASN 38758) in Jakarta, Indonesia. The IP registers a moderate risk score of 40 with no active threat indicators, though it is listed on 2 of 8 DNSBLs. No malicious campaigns, Tor usage, or known attacker patterns detected. Network exhibits stable routing with zero route changes over 30 days.

---

## Network Ownership and Geolocation

The IP falls within a legitimate Indonesian ISP network block. Ownership remains stable with zero observed ownership changes.

---

## Threat Intelligence Assessment

Risk Score: 40 (Moderate)

Threat Indicators: None detected

Blacklist Status: 2 of 8 DNSBLs (non-critical)

Campaign Association: None

Tor Exit Node: False

Key threat signals:

• Not classified as known attacker or spam source
• No active threat feeds or campaign correlations
• Zero threat observation count in recent history
• Abuse confidence score not elevated

---

## Network Classification

The IP shows no active services, TLS certificates, or DNS records. Forward resolution count is zero, and no PTR hostnames are registered.

---

## Neighborhood Analysis

Subnet: 180.178.111.58/24

Abuse Density: 0% (Clean)

Active Siblings: 0

Threat Siblings: 0

The /24 subnet demonstrates clean classification with no neighboring IPs showing threat activity. This indicates the IP is not part of a coordinated abuse infrastructure.

---

## Historical Observation Trend

Total Observations: 13

Recent Activity: July 25, 2026

Geographic signals remain consistent with Jakarta, Indonesia. No degradation in reputation or emergence of new threat indicators observed. Route stability confirmed with zero changes in the last 30 days.

---

## Recommended Defensive Actions

Based on risk score of 40, the following firewall rules are recommended:

```bash

# iptables

iptables -A INPUT -s 180.178.111.58 -j DROP

# nftables

nft add rule inet filter input ip saddr 180.178.111.58 drop

# nginx

deny 180.178.111.58;

# pfSense

180.178.111.58/32

# Cloudflare WAF

{

"description": "Block 180.178.111.58 — IPDebrief risk score 40",

"action": "block",

"filter": { "expression": "ip.src eq 180.178.111.58" }

}

# AWS WAF

{

"Addresses": ["180.178.111.58/32"],

"Description": "IPDebrief risk 40"

}

```

---

## Intelligence Conclusions

1. Legitimate Infrastructure: The IP is part of a major Indonesian ISP network with established routing and no infrastructure indicators of compromise.

2. Moderate Risk Profile: Risk score of 40 warrants defensive blocking, though no active malicious indicators exist. The DNSBL listings appear to be legacy or false positives.

3. Clean Neighborhood: Zero sibling threats in the /24 subnet suggests this IP is not part of a botnet or coordinated attack infrastructure.

4. No Active Services: Firewalled status indicates the IP is either reserved, decommissioned, or protected by upstream filtering.

Recommendation: Apply block rules per recommended firewall configurations. Monitor for any changes in service status or threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.