36.77.0.84📋 Copy

# IP Intelligence Briefing: 36.77.0.84/32

## Executive Summary

IP address 36.77.0.84 is a moderately risky (50/100) Indonesian residential or hosting endpoint operated by Febrian Setiadi under ASN 7713 (TLKM). The IP is currently firewalled with no open services, no active threat indicators, and resides in a clean subnet (36.77.0.0/24) with zero abuse density. No known malicious campaigns or campaign correlations detected.

## Ownership and Infrastructure

• ASN: 7713 (TLKM - Telkom Indonesia)
• Organization: Febrian Setiadi
• Network Block: 36.77.0.0/20 (CIDR: TLKM_BB_SERVICE_36_77_DIVRE1-2)
• Geolocation: Indonesia (ID), East Java, Trenggalek (1500km accuracy radius)
• Classification: Firewalled / No Services
• RIR: APNIC

## Threat Assessment

• Risk Score: 50 (Moderate Risk)
• Abuse Confidence Score: Not available
• Blacklist Status: Listed on 2 out of 8 DNSBLs (dnsblListedCount: 2)
• Threat Feeds: No active threat indicators
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## Technical Profile

• Operator Score: 0.1304 (Minimal)
• Route Stability: False (route changes observed in 30-day window)
• RPKI State: Not verified
• DNSSEC: Valid
• Mobile/Proxy/VPN: No
• Cloud/CDN/Hosting: Not classified
• Open Ports: None detected
• TLS/HTTP: No certificates or web services

## Neighborhood Analysis

• Subnet: 36.77.0.84/24
• Abuse Density: 0.0 (Clean)
• Total Siblings: 1
• Active/Threat Siblings: 0
• Risk Distribution: Zero high/medium/low risk neighbors

## Relationship Graph

Four relationships identified, all pointing to the same network entity (TLKM_BB_SERVICE_36_77_DIVRE1-2). No external relationships to organizations, hostnames, or SSL certificates detected.

## Observation History

Thirteen signal observations recorded as of July 30, 2026. Key observations include:

• Network type and geolocation signals (confidence: 30-52%)
• Subnet classification: Clean with zero inherited risk
• Operator score consistently minimal (0.1304)
• No persistent malicious behavior (threatPersistenceDays: 0)
• No ownership changes detected

## Recommended Actions

• Monitoring: No immediate action required. Monitor for changes in threat indicators or service exposure.
• Blocking: Not recommended at this time. Risk score (50) does not warrant aggressive blocking.
• Investigation: If this IP appears in security events, investigate context (e.g., port scan source, connection attempt). Consider reviewing DNSBL listings if email traffic is observed.
• Subnet Awareness: The broader /24 subnet is classified as clean with no threat siblings.

## SOC Analyst Notes

This IP represents a low-risk endpoint with moderate classification primarily due to DNSBL listings and operator score. The IP is currently inactive (no open services) and resides in a clean neighborhood. No active threat intelligence correlates. If security alerts are generated from this IP, validate context before taking action. The absence of service banners, certificates, or threat indicators suggests this may be a dormant or residential endpoint.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.