27.112.78.223📋 Copy

IP Intelligence Briefing: 27.112.78.223/32

Date: June 13, 2026

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership:

- ASN: 136052

- Organization: IRT-IDCLOUDHOST-ID (APNIC registered)

- Subnet: 27.112.78.0/24

• Geolocation:

- Country: Indonesia (ID)

- Latitude: -0.79, Longitude: 113.92 (approximate)

- Accuracy Radius: 1,500 km

• Network Role:

- Web Server (HTTP/2, Apache)

- Ports: 80 (HTTP), 443 (HTTPS), 22 (SSH)

- TLS Certificate: Issued by Let’s Encrypt, SAN: *lademeuredufondateur.com*

---

**2. Threat & Behavior**

• Threat Indicators: None detected (no blacklists, campaigns, or malicious activity).
• Historical Observations:

- Stable since June 3, 2026.

- Recent scan (June 13) shows standard Apache HTTP/2 server with no anomalies.

- Subnet abuse density: 1/10 (mostly clean).

• Neighbor Risk:

- Subnet: 27.112.78.0/24

- Active siblings: 2 (1 with risk score 25, 1 with 25).

- No high-risk neighbors.

---

**3. Relationships & Context**

• Linked Entities:

- Same network: IDNIC-IDCLOUDHOST-ID (APNIC).

- DNS: `ip27-112-78-223.cloudhost.web.id` (no email auth records).

• Certificates:

- Valid Let’s Encrypt certificate (subject: *lademeuredufondateur.com*).

• BGP:

- Origin ASN: 136052, route stable (no recent changes).

---

**4. Recommendations**

• Monitor: Track subnet (27.112.78.0/24) for abnormal activity.
• Verify: Confirm DNS records (`cloudhost.web.id`) for potential domain hijacking.
• Baseline: Use historical data (June 3–13, 2026) to establish normal behavior.

---

Conclusion:

This IP is a legitimate cloud-hosted web server with no signs of malicious activity. The subnet has minimal abuse risk, but continued monitoring is advised to detect subtle changes. No immediate action required.

Source: IPDebrief Threat Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.