181.214.70.102📋 Copy

# IP INTELLIGENCE BRIEFING: 181.214.70.102/32

Date: 2026-07-23

Classification: Low Risk

## EXECUTIVE SUMMARY

IP 181.214.70.102 presents a low-risk threat profile with a risk score of 25/100. The address resolves to a hosted domain (keznews.com) with no active services detected. While the IP maintains a stable risk posture, it appears on one DNS blacklist entry with high severity classification. No evidence of active malicious campaigns, hosting infrastructure, or coordinated abuse activity was identified.

## RISK PROFILE

## TECHNICAL DETAILS

Network Classification:

• ASN: 396356
• BGP Prefix: 181.214.70.0/24
• Route Stability: False
• RPKI State: Unknown
• Is Anycast: No
• Is Cloud/CDN/VPN: No

Geolocation:

• Country: United States
• Region: Massachusetts (US-MA)
• City: Boston (profile) / Los Angeles, CA (recent history)
• Timezone: America/New_York
• Geo Source Consensus: True

DNS Resolution:

• PTR Hostnames: visit.keznews.com
• Forward Hostnames: visit.keznews.com
• Forward Resolution Count: 1
• Email Auth (SPF/DMARC): Not configured
• Forward Confirmation: False

## THREAT INDICATORS

• Blacklist Status: Listed on 1 of 8 threat feeds
• Maximum Severity: High
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy Detection: No
• Threat Persistence Days: 0
• Honeypot Hits: 0
• WAF Violations: 0

## NETWORK SERVICES

No open ports or active services detected. Classification indicates "Firewalled / No Services." TLS certificates, server banners, and HTTP content not available.

## DOMAIN ASSOCIATIONS

• Primary Domain: keznews.com
• Associated Hostname: visit.keznews.com
• Certificate Matches: 0
• Hosted Domain Count: 0

## NETWORK NEIGHBORHOOD

Analysis of /24 subnet (181.214.70.0/24):

• Neighbor Count: 0
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0
• Active Siblings: 0
• Threat Siblings: 0

## OBSERVATION HISTORY

Total observations recorded: 12

Recent activity (2026-07-23):

• Geolocation signals detected (Los Angeles, CA and Boston, MA)
• Operator score signals: Minimal (0.1304)
• DNSSEC validation: Active
• Blacklist listings confirmed (8 total lists, 1 listing)
• Domain association: keznews.com

## OBSERVED ROUTING PATH

• Hop Count: 11
• First Hop RTT: 0.2ms
• Last Hop RTT: 77.2ms
• Timed Out Hops: 1
• Transit Networks: Comcast, GTT

## RECOMMENDATIONS FOR SOC ANALYSTS

1. Monitoring Priority: Low. The IP maintains a stable low-risk profile with no active threat indicators.

2. Block Decision: Not recommended. Risk score of 25 falls below typical blocking thresholds.

3. DNSBL Investigation: Review the single blacklist listing to determine if it correlates with observed activity.

4. Domain Monitoring: Track keznews.com for any changes in reputation or activity patterns.

5. Subnet Context: No concerning activity detected in the 181.214.70.0/24 subnet.

## CONCLUSION

IP 181.214.70.102 represents a low-risk address with no evidence of active malicious behavior. The single DNSBL listing warrants awareness but does not indicate immediate threat. The absence of open services and minimal neighborhood risk supports continued monitoring without additional mitigation measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.