116.132.219.227

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Threat Intelligence Briefing for IP 116.132.219.227

1. Risk Profile

Overall Risk: Low (riskScore: 0, providerScore: 0, authorityScore: 0).
Threat Indicators: No malicious activity detected (no blacklists, campaigns, or known attackers).
Network Classification: Firewalled / No Services; mobile (LTE/5G) network.

2. Ownership & Geolocation

ISP: China Unicom (ASN 4837, IRT-UNICOM-CN).
Geolocation: China (Heping, Liaoning), but coordinates and timezone are unconfirmed.
Mobile Carrier: China Unicom (MCC 460, MNC 01, 5G/LTE).

3. Observation History

Latest Activity: June 5, 2026 (geolocation signal).
Historical Trends: No persistent threats; zero threat observations over 30 days.
Services: No open ports, TLS certs, or HTTP banners detected.

4. Relationships & Subnet

Network Relationships: Linked to "UNICOM" network (ASN 4837).
Subnet Analysis:

- /24 Subnet: 116.132.219.0/24.

- Abuse Density: 0 (clean).

- Neighbors: 1 sibling IP (116.132.219.103) with a low risk score (25).

5. Actionable Insights

No Immediate Threat: The IP itself shows no malicious indicators.
Monitor Neighbor: The subnet contains one low-risk neighbor (116.132.219.103); monitor for anomalies.
Network Context: Mobile LTE/5G user; no signs of CDN, VPN, or proxy activity.

Recommendation: No blocking required. Focus on subnet-level monitoring and verify geolocation accuracy for further context.

---

*Generated using IPDebrief intelligence tools. Data as of June 5, 2026.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇨🇳 China
Region	LN
City	Heping
Timezone	—
Latitude	34.77
Longitude	113.72

🏢 Ownership & Registration

Organization	IRT-UNICOM-CN
ASN	AS4837
Network Name	UNICOM
CIDR Block	116.128.0.0/10
RIR	APNIC
Country	CN
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	20% (Poor)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Mobile
Service Purpose	Firewalled / No Services
Network Tier	Unknown — Insufficient routing data to classify

Mobile

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	27%	2	3
routing	13%	1	1
services	19%	2	2
ownership	27%	2	3
reputation	13%	1	2
geolocation	23%	2	2
Overall	20%	10	13

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-05-12 21:53:41 UTC
Last Seen	2026-06-06 14:34:27 UTC
Profile Built	2026-06-06 14:39:13 UTC
Data Freshness	Live
Signal Types	17
Total Observations	18

🔍 17 signal types · 18 observations collected

This report is generated from 17+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

116.132.219.227📋 Copy