112.65.211.161📋 Copy

IP Intelligence Briefing: 112.65.211.161

Date: 2026-06-13

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: ChinaUnicom Hostmaster (ASN 17621)
• Geolocation: Shanghai, China (34.77°N, 113.72°E)
• Network Role: Firewalled / No Services (no open ports or TLS certificates detected)
• Threat Indicators: No malicious activity, no known campaigns, no DNSBL listings.

---

**2. Observation History**

• 13 signals recorded over 30 days:

- Low confidence (0.30–0.75) for most entries.

- DNSSEC validation confirmed (no spoofing detected).

- One DNSBL listing (1/8 total lists) with "high" severity, but no active threats.

- No persistent malicious activity (threat persistence score: 0).

---

**3. Relationships**

• Linked to network: UNICOM-SH (same ISP, ASN 17621).
• No direct connections to known malicious entities or subnets.

---

**4. Neighborhood Analysis**

• /24 subnet: 112.65.211.0/24 (ChinaUnicom).
• Neighbor IPs:

- 112.65.211.222: Risk score 40 (Moderate Risk).

- Others: No risk scores or abuse indicators.

• Subnet abuse density: 0% (low risk).

---

**5. Recommendations**

• Monitor DNSBL status: The IP is listed on one high-severity DNSBL, but no active threats are detected.
• Check for new services: No open ports or TLS certificates were observed, but ensure no unexpected services emerge.
• No firewall action required: Low-risk, no malicious indicators, and no high-severity threats.

Conclusion: This IP is part of a legitimate ChinaUnicom network with no current malicious activity. No immediate action is needed, but ongoing monitoring is advised for any changes in threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.