36.85.223.246📋 Copy

# IP Intelligence Briefing: 36.85.223.246/32

## Executive Summary

The IP address 36.85.223.246/32 presents a moderate risk profile (risk score: 50) with no active malicious indicators. The address is associated with PT Telkom Indonesia's broadband service infrastructure in North Sulawesi, Indonesia. No open services or ports were detected, and the IP is classified as "clean" with zero abuse density in its /24 subnet.

## Ownership and Registration

• ASN: 7713 (PT Telkom Indonesia APNIC Resources Management)
• Organization: TLKM_BB_SERVICE_36_85
• Network Block: 36.85.208.0/20
• Registration: APNIC RIR
• Service Type: Firewalled / No Services

## Geolocation

• Country: Indonesia (ID)
• Region: North Sulawesi
• City: Manado
• Coordinates: 1.4648°S, 124.8518°E
• Geo Confidence: Moderate (52% confidence from multi-signal inference)

## Threat Assessment

Current Status: No active threat indicators detected

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• DNSBL Listings: 2 of 8 total lists

Behavioral Analysis:

• No honeypot hits recorded
• No enumeration strikes detected
• No WAF violations observed
• Threat persistence: 0 days
• IP not classified as persistently malicious

## Network Neighborhood Analysis

The /24 subnet (36.85.223.0/24) shows low abuse activity:

• Abuse Density: 0
• Subnet Classification: Clean
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0

Neighbor IP: 36.85.223.52 (Risk Score: 25, Authority Score: 50) — low-risk neighbor with no correlated threats.

## Historical Observations

Thirteen observations recorded, with the most recent activity from 2026-07-30. Historical signals show:

• Consistent geolocation to Indonesia
• No ownership changes detected
• No persistent malicious activity patterns
• Subnet classification remained "clean" throughout observation period

## Control Plane Data

• BGP Prefix: 36.85.220.0/22
• Route Stability: False (route changes detected)
• Route Changes (30d): 0
• Route Origin: ASN 7713

## Recommended Actions

Based on the moderate risk profile (score: 50), the following firewall rules may be applied:

iptables:

```bash

iptables -A INPUT -s 36.85.223.246 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 36.85.223.246 drop

```

Cloudflare WAF:

```json

{"description":"Block 36.85.223.246 — IPDebrief risk score 50","action":"block","filter":{"expression":"ip.src eq 36.85.223.246"}}

```

AWS WAF:

```json

{"Addresses":["36.85.223.246/32"],"Description":"IPDebrief risk 50"}

```

## Analyst Notes

The IP address is associated with legitimate Indonesian ISP infrastructure (PT Telkom). While no active threats were detected, the moderate risk score warrants monitoring. The subnet shows low abuse density, and the neighbor IP 36.85.223.52 presents minimal risk. No immediate blocking is required unless additional context indicates targeted activity from this address.

*Report generated from IPDebrief intelligence platform data.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.