1.95.90.171📋 Copy

# Intelligence Briefing: 1.95.90.171/32

Classification: LOW RISK | Date: 2026-07-29

## Executive Summary

IP 1.95.90.171 presents a low-risk threat profile with no active malicious indicators. The address is associated with a Chinese network infrastructure provider (DXTNET/IRT-CNNIC-CN) and shows no evidence of abuse, malware, or scanning activity.

## Technical Profile

Network Classification:

• ASN: 55990 (IRT-CNNIC-CN)
• Organization: IRT-CNNIC-CN (DXTNET)
• CIDR Block: 1.95.0.0/16
• RIR: APNIC
• Country: China (CN)
• Region: Guizhou, Guiyang

Risk Assessment:

• Overall Risk Score: 0
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence: Not applicable
• Blacklist Status: Clean (0 listings)

Network Role:

• Service Purpose: Firewalled / No Services
• Infrastructure Type: Infrastructure provider network
• Is Cloud/CDN/Proxy/VPN: No
• Is Tor Exit/Hosting: No
• Bogon Status: No

## DNS Analysis

• PTR Hostname: ecs-1-95-90-171.compute.hwclouds-dns.com
• Forward Resolution: Confirmed
• Hosted Domain Count: 0
• Reverse DNS: Active and consistent

## Threat Intelligence

Malicious Activity Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threat Feeds: None
• Known Campaigns: None

Behavioral Signals:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: None observed

Control Plane:

• BGP Prefix: 1.95.64.0/18
• DNSSEC Valid: Yes
• DNSBL Listed: 0 of 8 lists
• Route Stability: Unstable (route changes detected in 30-day window)

## Neighborhood Analysis

• Subnet: 1.95.90.171/24
• Neighbor Count: 0
• Abuse Density: 0
• Threat Siblings: 0
• Classification: None

The /24 subnet shows no adjacent threat activity, indicating this IP operates in isolation from neighboring malicious infrastructure.

## Relationship Graph

Connected Entities:

• DNS Association: ecs-1-95-90-171.compute.hwclouds-dns.com (repeated)
• Network Association: DXTNET

No additional organizational or certificate relationships detected.

## Observation History

Total Historical Signals: 13

Latest Observation: 2026-07-29T12:10:09 UTC

Recent Signal Summary:

• Ownership registration: Confirmed (APNIC, IRT-CNNIC-CN)
• Geolocation data: Consistent China-based location
• Operator score: 0.2609 (Basic classification)
• No ownership changes observed
• No persistent threat behavior detected

Temporal Indicators:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No
• Threat Observation Count: 0

## Recommended Actions

No firewall rules or mitigation actions required. The IP presents no actionable threat indicators based on current intelligence.

## Assessment

This IP address belongs to a legitimate Chinese network infrastructure provider with no observed malicious activity. The clean security posture, combined with proper DNS configuration and absence of blacklisting, indicates normal operational behavior. No further monitoring or blocking is recommended at this time.

---

*Intelligence generated by IPDebrief Threat Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.