113.240.110.90📋 Copy

IP INTELLIGENCE BRIEFING

Subject: 113.240.110.90/32

Classification: Threat Intelligence Assessment

Date: Current

---

## EXECUTIVE SUMMARY

IP 113.240.110.90 presents as a low-risk address with limited observable threat activity. The address is located in China within a data center infrastructure. While the primary IP shows minimal malicious indicators, adjacent subnet analysis reveals elevated risk signatures on neighboring addresses. No direct relationships to known campaigns or organizations were identified.

---

## TECHNICAL PROFILE

Risk Assessment:

• Overall Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Reputation Classification: Low Risk

Network Identity:

• ASN: 63835 (CT-HuNan-Changsha-IDC)
• Network Prefix: 113.240.110.0/24
• Geographic Location: China (CN), Changsha region
• Infrastructure Type: Data Center / IDC
• Service Status: Firewalled / No Services Detected

---

## GEOGRAPHIC & NETWORK ANALYSIS

Geolocation:

• Country: China (CN)
• Coordinates: 34.7732°N, 113.722°E
• Allocation Date: 2008-12-16
• Registry: APNIC

Network Role:

• Not classified as cloud, CDN, VPN, proxy, or Tor exit node
• No hosting or residential characteristics detected
• No bogon or anomaly classification

---

## THREAT INDICATORS & BLACKLIST STATUS

Current Threat Profile:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Campaign Membership: None identified
• Known Campaigns: Zero

Blacklist Analysis:

• Blacklist Count: 1 active listing
• Maximum Severity: High
• Total Listings: 8 historical listings across threat feeds

Behavioral Indicators:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0

---

## DNS & CONTROL PLANE

DNS Configuration:

• PTR Records: None
• Forward Resolution: Inactive
• DNSSEC Validation: Valid
• Email Authentication: SPF/DMARC not configured

Control Plane:

• Route Stability: Unstable (isRouteStable: false)
• BGP Prefix: 113.240.110.0/24
• Route Changes (30d): 0
• Operator Score: 0

---

## SUBNET NEIGHBORHOOD ANALYSIS

Subnet Overview: 113.240.110.0/24

• Abuse Density: 0%
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

Neighbor Assessment:

• 113.240.110.0: Risk Score 50, Authority Score 50 (Medium Risk)

*Note: Adjacent address 113.240.110.0 exhibits elevated risk metrics (Score 50), indicating potential infrastructure-wide risk patterns.*

---

## OBSERVATION HISTORY

Temporal Analysis (10 observations):

• Recent activity concentrated around 2026-07-29
• Geolocation signals consistent: China-based
• DNSSEC validation maintained
• ASN attribution stable (63835)
• No ownership changes recorded

Risk Trend: Static/Neutral

• Threat Persistence Days: 0
• Is Persistently Malicious: No

---

## RELATIONSHIP GRAPH

• Related Entities: None identified
• Connected Hostnames: None
• Associated Organizations: None
• Linked Certificates: None

---

## RECOMMENDED ACTIONS

Firewall Rules:

• No immediate blocking required based on current risk profile
• Monitor for service activation or behavioral changes

SOC Recommendations:

1. Add 113.240.110.0/24 to monitoring watchlist due to neighbor risk indicators

2. Investigate the high-severity blacklist listing (context required)

3. Monitor for emergence of open ports or service banners

4. Evaluate if adjacent subnet risk warrants broader traffic analysis

Priority: LOW

Threat Level: LOW

Action Required: Monitor

---

*Intel prepared for SOC operations team. Data sourced from IPDebrief threat intelligence platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.