110.166.67.189📋 Copy

IP Intelligence Briefing: 110.166.67.189

Date: 2026-06-04

---

**1. Core Profile**

• Risk Score: Moderate (50/100)
• Ownership:

- ASN: 59223

- Organization: Gui Fang (CHINANET-QH, China)

- Geolocation: China (CN), no city/region specified

• Threat Indicators: Clean (no malware, phishing, or spam associations).
• Network Role: Firewalled infrastructure with no open services or TLS/HTTP activity detected.

---

**2. Observation History**

• Latest Activity: June 4, 2026 (minimal risk signal, DNSSEC valid).
• Trend:

- No significant changes in risk score (stable at "Minimal").

- No spikes in threat indicators or DNS anomalies.

- Historical data shows consistent benign behavior.

---

**3. Network Relationships**

• Linked Entities:

- Subnet: 110.166.64.0/20 (CHINANET-QH, China).

- No direct connections to known malicious networks, C2 servers, or Tor nodes.

• Subnet Abuse Density: 0% (clean).

---

**4. Neighborhood Analysis**

• Subnet: 110.166.67.189/24
• Neighbors: No active sibling IPs detected (abuse density: 0%).
• Potential: Likely a static, non-routable IP (no dynamic DNS or services).

---

**5. Recommendations**

• SOC Action:

- Monitor for unexpected traffic patterns or service changes.

- No immediate mitigation required; prioritize based on contextual alerts.

• Firewall: No rules needed unless tied to a specific incident.

---

Conclusion: 110.166.67.189 is a legitimate, low-risk IP associated with a Chinese ISP. No evidence of malicious activity detected. Maintain passive monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.