117.164.191.217
IP Intelligence Briefing: 117.164.191.217
Date: 2026-06-03
---
**1. Core Profile**
- Risk Score: 65 (Moderate Risk)
- Ownership: Owned by China Mobile (CMNET) (ASN 56045).
- Geolocation: Beijing, China (Jinrong Ave., Xicheng District).
- Network Role: Mobile carrier infrastructure (no residential/cloud services).
- Threat Indicators: No confirmed malicious activity, spam, or attacker associations.
---
**2. Observed Activity**
- DNSBL Listings:
- Listed in 3/8 DNSBLs (high severity risk).
- DNSSEC validation failed for reverse zone (`217.191.164.117.in-addr.arpa`).
- BGP Data:
- BGP prefix `117.164.160.0/19` registered to CMNET (allocated 2007).
- Route stability: Unstable (no recent route changes).
- Network Behavior:
- Traceroute blocked (ICMP disabled), preventing geo-validation.
- No open ports or TLS services detected.
---
**3. Relationships**
- Linked Entities:
- Directly tied to CMNET network (ASN 56045).
- No associations with subnets, domains, or organizations.
---
**4. Neighborhood Analysis**
- Subnet: `117.164.191.217/24`
- Abuse Density: 1 (low risk).
- Neighbors: No active IPs in the subnet (0 siblings).
---
**5. Recommendations**
- Monitor DNSBL Status: Investigate why the IP is listed in 3 DNSBLs.
- Verify BGP Configuration: Ensure CMNET’s BGP routes for this prefix are secure.
- Check DNSSEC Compliance: Resolve DNSSEC validation failures for reverse zones.
- Network Segmentation: Isolate mobile carrier infrastructure from internal networks.
---
Conclusion:
The IP is part of China Mobile’s CMNET network with no confirmed malicious activity. However, its DNSBL listings and unstable BGP route raise operational concerns. SOC teams should monitor for configuration changes and validate DNSSEC compliance. No immediate action required, but ongoing surveillance is advised.
Tools Used: `ipdebrief_profile`, `ipdebrief_history`, `ipdebrief_relationships`, `ipdebrief_neighbors`.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-CHINAMOBILE-CN |
| ASN | AS56045 |
| Network Name | CMNET |
| CIDR Block | 117.160.0.0/11 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | localhost |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | localhost |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 29% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 23% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:03:33 UTC |
| Last Seen | 2026-06-26 18:10:29 UTC |
| Profile Built | 2026-06-22 10:35:19 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 21 |
Full dossier details are available via our API.