182.16.176.106📋 Copy

# IP Intelligence Briefing: 182.16.176.106

## Executive Summary

IP 182.16.176.106 presents as a moderate-risk infrastructure address assigned to Indonesian entity Dedi Seprinra Arfie. The IP is geolocated to South Tangerang, Banten region with origin ASN 17995. Despite a moderate risk score of 55, current service scanning reveals no active ports, TLS certificates, or HTTP services. The address appears to be firewalled with no exposed services.

## Risk Assessment

• Overall Risk Score: 55 (Moderate Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence: Not assessed (null)
• DNSBL Listings: 3 out of 8 total lists
• Classification: No active services detected; firewalled configuration

## Geolocation & Network Attribution

• Country: Indonesia (ID)
• Region: Banten
• City: South Tangerang
• ASN: 17995
• CIDR Block: 182.16.176.0/24
• Timezone: Asia/Jakarta
• Geolocation Consensus: Yes (2 sources)

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threat Feeds: None
• Known Campaigns: None
• Honeypot Hits: 0
• WAF Violations: 0

## Service & Network Role Analysis

• Open Ports: None detected
• TLS Certificates: 0
• HTTP Services: None
• Network Role: Firewalled / No Services
• Infrastructure Type: Not classified as provider, CDN, VPN, proxy, hosting, mobile, or residential

## Subnet Neighborhood Analysis (182.16.176.0/24)

• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• Subnet Classification: No inherited risk

## Historical Signal Observations

Thirteen observation records detected, including:

• Ownership attribution to Dedi Seprinra Arfie (confidence 0.90)
• RIR registration via APNIC (confidence 0.95)
• Geolocation signals from multiple sources (Cymru, MaxMind) indicating Jakarta/South Tangerang region
• No persistent malicious behavior observed
• Average ownership duration: Not determined
• Threat persistence days: 0

## Relationship Graph

No related entities identified in relationship analysis (no associated hostnames, organizations, subnets, or certificates).

## Recommended Actions

Based on current risk profile and service analysis, the following firewall rules are recommended for security appliances:

iptables/nftables:

```

# Block inbound traffic to this IP

iptables -A INPUT -d 182.16.176.106 -j DROP

```

nginx:

```

# Block requests to this IP

set $block_ip 182.16.176.106;

if ($remote_addr = $block_ip) { return 403; }

```

Cloudflare/AWS WAF:

• Consider IP-based blocking rule due to DNSBL listings
• Monitor for service activation if previously blocked

## Intelligence Notes

The moderate risk score of 55 appears to derive primarily from DNSBL listings (3 of 8 lists) rather than active malicious behavior. The subnet 182.16.176.0/24 shows zero abuse density and no neighboring threat activity. No services are currently exposed, and the IP appears to be in a blocked or dormant state. Historical signals show stable ownership attribution to Indonesian entity Dedi Seprinra Arfie with no evidence of persistent malicious activity.

Recommended Monitoring Level: Standard monitoring appropriate for moderate-risk infrastructure. No immediate threat mitigation required unless service activation or threat indicators emerge.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.