111.228.34.251📋 Copy

## IP Intelligence Briefing: 111.228.34.251/32

Date: Current

Classification: Low Risk

Risk Score: 25/100

---

**Executive Summary**

IP address 111.228.34.251/32 is a low-risk residential or consumer-grade IP associated with organization "Li Yunfei" under network name "jdcom" (ASN 141679). The IP demonstrates no active threat indicators, no service exposure, and no persistent malicious behavior. No actionable firewall rules are recommended at this time.

---

**Ownership and Geolocation**

---

**Threat Assessment**

Current Status: Clean - No Active Threats

• Blacklist Count: 0
• DNSBL Listings: 1 of 8 lists (minimal impact)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Activity: No known associations
• Abuse Confidence: Not applicable (low risk profile)

Network Role:

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Classification: Residential/Consumer

---

**Observation History**

• Total Observations: 14 (most recent: 2026-07-29)
• Threat Persistence Days: 0
• Ownership Changes: 0
• Persistent Malicious Activity: False
• Behavioral Indicators:

- Honeypot Hits: 0

- Enumeration Strikes: 0

- WAF Violations: 0

- Total Incidents: 0

Historical Trend: Stable profile with no escalation in risk indicators. All observations show consistent low-risk classification.

---

**Subnet Analysis (111.228.34.0/24)**

The immediate /24 subnet shows zero abuse activity and is classified as clean. No neighboring IPs present elevated risk signals.

---

**Relationship Graph**

• Total Relationships: 4
• Network Associations: All "Same Network" (jdcom)
• Organizations: None beyond jdcom
• Hostnames: None detected
• Certificates: None detected

---

**Control Plane Data**

• Route Stability: False (route changes detected in 30d)
• Route Changes (30d): 0
• BGP Prefix: 111.228.0.0/18
• Origin ASN: 141679
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)
• Delegation Age: Not applicable
• IRR Consistency: Not applicable

---

**Recommended Actions**

Current Status: No Immediate Action Required

No firewall rules or mitigation actions are recommended at this time. The IP presents a low-risk profile with no active threat indicators, no service exposure, and no malicious behavior patterns.

SOC Analyst Notes:

• Monitor for changes in risk score or threat indicators
• If this IP appears in traffic logs, treat as benign consumer traffic
• No immediate blocking or rate-limiting actions warranted
• Standard logging and monitoring practices apply

---

Confidence Level: High (based on 14 observations, clean subnet, no threat indicators)

Last Updated: Current analysis timestamp

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.