## IP INTELLIGENCE BRIEFING
IP Address: 111.170.174.224/32
Classification: Low Risk Infrastructure
Date: 2026-07-28
EXECUTIVE SUMMARY
The IP address 111.170.174.224 is classified as low risk with a risk score of 25. The address belongs to CHINANET HB ADMIN (ASN 151185) within the 111.170.0.0/16 block. No active threat indicators or malicious behavior were observed during the intelligence gathering period. The IP is currently firewalled with no open services detected.
OWNERSHIP AND GEOLOCATION
- Organization: CHINANET HB ADMIN
- ASN: 151185
- Country: China (CN)
- Geographic Region: Inferred coordinates 35.86°N, 104.2°E (Shaanxi province area)
- CIDR Block: 111.170.0.0/16
- RIR: APNIC
- BGP Prefix: 111.170.160.0/20
NETWORK CHARACTERIZATION
- Network Role: Firewalled / No Services
- Open Ports: None detected
- DNS Resolution: No PTR hostnames available
- Forward Resolution: Not confirmed
- Hosted Domains: None
- Email Authentication: No SPF/DMARC records associated
- Network Classification: Infrastructure provider network
THREAT ASSESSMENT
- Overall Risk Score: 25 (Low)
- Abuse Confidence Score: Not applicable (no services exposed)
- Blacklist Status: Listed on 1 of 8 DNSBL lists
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Persistent Threat: No
- Threat Persistence Days: 0
- Threat Observation Count: 0
SUBNET ANALYSIS (111.170.174.0/24)
- Abuse Density: 0 (Clean)
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- Classification: Clean
- Inherited Risk: 0
OBSERVATION HISTORY
Fifteen signal observations recorded. Recent activity (2026-07-28) indicates:
- Network classification signals consistent with "clean" status
- No ownership changes detected
- Geolocation data stable (China)
- No service enumeration strikes
- No WAF violations or honeypot hits
- ICMP validation blocked (unable to validate via ICMP)
RELATIONSHIP GRAPH
Five relationships detected, all classified as "Same Network" pointing to CHINANET-HB. No external entity relationships identified (no associated hostnames, organizations, or certificates beyond network classification).
SECURITY RECOMMENDATIONS
No specific firewall rules or blocking actions recommended at this time. The IP presents low risk with no active threat indicators. Monitor for any changes in service status or threat indicators.
INTELLIGENCE CONFIDENCE
High – Multiple signal sources corroborated (geolocation, network classification, ownership data). DNSBL listing noted but low-risk context.
---
*Intelligence compiled from IPDebrief platform analysis. Review against internal threat indicators before taking action.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | CHINANET HB ADMIN |
| ASN | AS151185 |
| Network Name | CHINANET-HB |
| CIDR Block | 111.170.0.0/16 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS151185 |
| Network Prefix | 111.170.160.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-18 11:33:35 UTC |
| Last Seen | 2026-08-31 22:50:37 UTC |
| Profile Built | 2026-08-31 22:53:08 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 111.170.174.224
Who owns the IP address 111.170.174.224?
111.170.174.224 is registered to CHINANET HB ADMIN. The address falls within the 111.170.0.0/16 network block. Registration is held at APNIC.
Where is 111.170.174.224 located?
Geolocation data places 111.170.174.224 in China. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 111.170.174.224 malicious or safe?
111.170.174.224 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.