116.55.245.26📋 Copy

IP Intelligence Briefing: 116.55.245.26

Date: 2026-06-17

---

**1. Risk Profile**

• Risk Score: 65 (Moderate Risk)
• Threat Indicators: No direct malicious activity detected (no malware, phishing, or C2 indicators).
• DNS Associations: Linked to `26.245.55.116.broad.km.yn.dynamic.163data.com.cn` (Chinese ISP domain).
• Network Role: Firewalled with no open ports or services detected.

---

**2. Ownership & Geolocation**

• Registrar: CHINANET-YN (ASN 134765, "zhiyong liu")
• Geolocation: China (CN), no city/region specified.
• Subnet: 116.55.245.26/24 (abuse density: 1, classified as "mostly_clean").

---

**3. Threat Observations**

• Historical Listings:

- Listed in 8 threat feeds (2 high-severity, 3 medium-severity) between 2026-06-03 and 2026-06-17.

- DNSBL entries detected (3 out of 8 lists).

• Behavioral Flags:

- No Tor, CDN, or proxy activity.

- No mobile/residential network indicators.

---

**4. Network Relationships**

• DNS Links: Strong association with the Chinese ISP domain (`163data.com.cn`).
• Subnet Peers: No active neighbors identified in the /24 subnet.

---

**5. Recommendations**

• Monitor DNS Activity: Investigate the linked hostname for potential abuse or phishing campaigns.
• Check Subnet Context: Verify if the /24 subnet has other risky IPs (no neighbors found, but abuse density is low).
• Blocklist Review: Consider adding to DNSBLs if further abuse is detected.
• Geolocation Verification: Confirm if the IP is part of a legitimate Chinese ISP infrastructure or a compromised network.

---

Note: No immediate mitigation required, but ongoing monitoring is advised due to historical threat listings and DNS associations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.