117.151.106.180📋 Copy

IP Intelligence Briefing: 117.151.106.180

*Generated via IPDebrief tools: Profile, History, Relationships, & Neighborhood Analysis*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- AS: 9808 (China Mobile)

- Organization: IRT-CHINAMOBILE-CN (CMNET)

- Geolocation: Wuhan, Hubei, China (2500km accuracy radius)

• Threat Indicators: Clean (no abuse, spam, or malicious activity detected).
• Network Role: Mobile carrier (LTE/5G) infrastructure.
• Services: No open ports, TLS certificates, or HTTP services detected.

---

**2. Observation History (Last 30 Days)**

• DNSSEC Validity: Mixed results (some records invalid).
• Operator Score: Minimal risk (0.13).
• Geolocation Consensus: Plausible (Wuhan, China).
• Threat Signals: No malicious campaigns, spam, or blacklisted activity.
• Stability: Route stability score indicates unstable routing (likely due to mobile carrier dynamics).

---

**3. Relationships & Network Context**

• Network Affiliation:

- Part of CMNET (China Mobile’s public network).

- No direct relationships to subnets, hostnames, or organizations.

• Subnet: 117.151.106.180/24 (clean, no abuse density).
• Mobile Carrier: China Mobile (MCC 460, MNC 00), using LTE/5G.

---

**4. Neighborhood Analysis**

• Subnet: 117.151.106.180/24.
• Neighbor Activity:

- Total Siblings: 1 (itself).

- Active Neighbors: 0.

- Threat Siblings: 0.

• Abuse Density: 0% (clean subnet).

---

**5. Recommended Actions**

• Firewall Rules:

- iptables: `iptables -A INPUT -s 117.151.106.180 -j DROP`

- nftables: `nft add rule inet filter input ip saddr 117.151.106.180 drop`

- Cloudflare WAF: Block IP with description "IPDebrief risk score 40".

- AWS WAF: Add `117.151.106.180/32` to a rule with description "IPDebrief risk 40".

---

**6. Summary**

This IP is associated with China Mobile’s CMNET network and is geolocated in Wuhan, China. It shows no malicious activity, but as a mobile carrier IP, it may be part of a larger infrastructure with potential for dynamic routing or carrier-specific risks. Monitor for changes in routing stability or new threat signals. Blocking is recommended due to its moderate risk profile, but ensure it does not disrupt legitimate mobile services.

*Tools used: ipdebrief_profile, ipdebrief_history, ipdebrief_relationships, ipdebrief_neighbors, ipdebrief_actions.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.