IP Intelligence Briefing: 1.86.233.5
Date: 2026-06-12
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Ownership:
- ASN: 4134 (CHINANET-SN)
- Organization: Xianghong Cao
- Country: China (CN)
- Region: SN (Shaanxi Province)
- City: Beilin
- Network Role: Mobile (China Telecom LTE/5G)
- Threat Indicators:
- No direct malicious activity detected.
- Listed in 2 DNSBLs (high severity) with 8 total listings.
---
**2. Observation History**
- Recent Activity (Last 30 Days):
- DNSSEC Valid: Confirmed via DNS resolution.
- BGP Prefix: 1.80.0.0/13 (CHINANET-BACKBONE).
- DNS PTR: No reverse DNS records found.
- Threat Signals:
- 2 high-severity DNSBL listings (e.g., Spamhaus, OpenDNS).
- No malware campaigns or phishing indicators.
---
**3. Network Relationships**
- Linked Entities:
- Same Network: CHINANET-SN (ASN 4134).
- Geolocation Consensus: Confirmed via 2 geolocation sources.
- Mobile Carrier: China Telecom (MCC 460, MNC 03).
---
**4. Neighborhood Analysis**
- Subnet: 1.86.233.5/24 (no active neighbors detected).
- Abuse Density: 0% (isolated IP).
- Risk Inheritance: No adjacent IPs with elevated risk.
---
**5. Recommendations**
- Monitor DNSBL Listings: Investigate why this IP is flagged in 2 DNSBLs.
- Check BGP Anomalies: Verify 1.80.0.0/13 prefix stability (CHINANET-BACKBONE).
- Mobile Network Context: Given China Telecomβs LTE/5G infrastructure, ensure mobile device traffic is segmented.
- No Immediate Action: No direct threat indicators, but DNSBL flags warrant further analysis.
---
Source: IPDebrief Threat Intelligence Platform
Note: This IP is part of a mobile network with no direct malicious activity, but DNSBL listings suggest potential spam or abuse risks.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Xianghong Cao |
| ASN | AS4134 |
| Network Name | CHINANET-SN |
| CIDR Block | 1.80.0.0/13 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 27% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 19% | 2 | 2 |
| Overall | 7% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Recent
| First Seen | 2026-06-02 12:02:46 UTC |
| Last Seen | 2026-06-26 18:10:08 UTC |
| Profile Built | 2026-06-25 14:01:33 UTC |
| Data Freshness | Recent |
| Signal Types | 15 |
| Total Observations | 15 |
Full dossier details are available via our API.