111.26.101.122📋 Copy

IP Intelligence Briefing: 111.26.101.122

Date: 2026-06-17

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- ASN: 134810

- Organization: IRT-CHINAMOBILE-CN (CMNET)

- Region: Beijing, China

• Network Role: Mobile carrier infrastructure (no public services detected).
• Threat Indicators: No direct malicious activity (no malware, phishing, or spam associations).

---

**2. Observation History**

• Recent Activity (2026-06-17):

- Listed in 8 threat intelligence feeds (1 medium-severity listing).

- Geolocation inferred to Beijing, China (2500km accuracy).

• Historical Data (2026-06-02):

- BGP prefix confirmed as 111.26.64.0/18 under CMNET.

- Subnet abuse density: 0.5 (moderate risk).

---

**3. Network Relationships**

• Linked Entities:

- Same network: CMNET (ASN 134810).

- Subnet: 111.26.101.122/24 (abuse density: 1).

• High-Risk Neighbor:

- 111.26.101.77 (risk score: 80).

---

**4. Subnet Analysis**

• Subnet: 111.26.101.122/24
• Abuse Density: 1 (high risk).
• Active Siblings: 0 (no active IPs in subnet).
• Threat Siblings: 1 (high-risk neighbor detected).

---

**5. Recommendations**

• Monitor Subnet: The subnet has a high abuse density, and one neighbor is flagged as high risk. Investigate potential lateral movement or shared infrastructure risks.
• Geolocation Verification: Confirm the IP’s location in Beijing, China, as geolocation data is inferred.
• Neighbor Analysis: Focus on 111.26.101.77 for further threat assessment.

---

Conclusion: While the IP itself shows no direct malicious activity, its subnet and a neighboring IP pose potential risks. SOC teams should prioritize monitoring the subnet and the high-risk neighbor for anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.