IPDebrief

61.72.140.163

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 61.72.140.163/32

Date: 2026-07-29

Classification: Low Risk

Reporting Agency: IPDebrief Intelligence Platform

---

## Executive Summary

IP 61.72.140.163 is a South Korean mobile network address assigned to KT Corporation (ASN 4766, KORNET-KR). Current risk assessment indicates low threat posture with a risk score of 25. The address operates on a residential/mobile network infrastructure with no active services exposed. Historical data reveals minimal blacklist presence with one high-severity listing among eight monitored feeds.

---

## Network Attribution

AttributeValue
**IP Address**61.72.140.163/32
**Country**KR (South Korea)
**City/Region**Seoul, Dongdaemun
**ASN**4766 (IP Manager)
**Organization**KORNET-KR (KT Corporation)
**Network Block**61.72.0.0/14
**Mobile Carrier**KT Corporation (MCC: 450, MNC: 08)
**Connection Type**LTE/5G Mobile

---

## Risk Assessment

Current Risk Score: 25/100 (Low Risk)

Risk Indicators:

Network Classification:

---

## Control Plane Analysis

MetricValue
**BGP Prefix**61.72.0.0/13
**Origin ASN**4766
**Route Stability**Unstable (isRouteStable: false)
**RPKI State**Not available
**DNSSEC Valid**Yes
**DNSBL Listed**1 of 8 feeds
**Operator Score**0.1304 (Minimal)
**Delegation Age**Not available

---

## Observation History

Total Signals Observed: 13

Recent Activity (2026-07-29):

Temporal Analysis:

---

## Relationship Graph

Connected Entities: 3

---

## Subnet Neighborhood Analysis

Subnet: 61.72.140.0/24

---

## Recommended Security Actions

Based on current risk profile:

1. Allow with Monitoring: This IP presents low risk and is a legitimate mobile carrier address. No blocking required.

2. DNSBL Monitoring: Monitor the one active blacklist listing for changes in severity or additional feeds.

3. Traffic Classification: Treat as mobile/residential traffic; apply appropriate mobile carrier filtering policies if required.

4. No Firewall Rules Required: No actionable firewall rules recommended; IP does not exhibit malicious behavior.

---

## Intelligence Conclusion

61.72.140.163 is a legitimate South Korean mobile network address from KT Corporation with minimal threat indicators. The single high-severity DNSBL listing appears to be historical or related to content rather than the IP itself. No blocking or mitigation actions are recommended. Standard mobile carrier traffic handling procedures apply.

---

Report Generated: 2026-07-29

Data Source: IPDebrief Intelligence Platform

Classification: Internal Use - SOC Operations

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฐ๐Ÿ‡ท South Korea
RegionSeoul
CityDongdaemun
TimezoneAsia/Seoul
Latitude35.91
Longitude127.77

๐Ÿข Ownership & Registration

OrganizationIP Manager
ASNAS4766
Network NameKORNET-KR
CIDR Block61.72.0.0/14
RIRAPNIC
CountryKR
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureMobile
Service PurposeSingle-Service Host
Network TierUnknown โ€” Insufficient routing data to classify
Mobile

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
Closed Ports22, 25, 443, 3389, 8080, 8443 (1 open / 7 scanned)
ServerMicrosoft-IIS/10.0
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
0%
00
routing
25%
11
services
25%
11
ownership
25%
12
reputation
0%
00
geolocation
0%
00
Overall12%34
Coverage: 3/6 dimensions ยท Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-22 07:16:30 UTC
Last Seen2026-07-29 12:57:19 UTC
Profile Built2026-07-29 13:13:23 UTC
Data FreshnessLive
Signal Types18
Total Observations18
๐Ÿ” 18 signal types ยท 18 observations collected
This report is generated from 18+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.