# Intelligence Briefing: 117.187.180.251/32
## Executive Summary
IP 117.187.180.251 is a residential IP address within the China Mobile CMNET infrastructure (ASN 138407) located in Beijing, China. Current risk assessment indicates low risk with no active threat indicators. The IP is associated with the 117.187.180.0/24 subnet, which shows mixed classification with moderate abuse density.
## Technical Profile
- IP Address: 117.187.180.251/32
- ASN: 138407 (IRT-CHINAMOBILE-CN)
- Organization: China Mobile
- Geolocation: Jinrong Ave., Xicheng District, Beijing, China
- Risk Score: 0 (Low Risk)
- Provider Score: 0
- Authority Score: 0
- Stability Score: 0
## Network Classification
- Infrastructure Type: Residential
- Service Status: Firewalled / No Services
- Open Ports: None detected
- DNS Records: No PTR hostnames, no forward resolution
- Email Authentication: No SPF/DMARC records
- Not classified as: CDN, VPN, Proxy, Tor, Hosting, Cloud
## Threat Indicators
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0
- Threat Feeds: None
- Campaign Matches: 0
## Neighborhood Context (117.187.180.0/24)
- Subnet Classification: Mixed
- Abuse Density: 0% (neighborhood tool) / 33.33% (profile data)
- Total Siblings: 6
- Active Siblings: 2
- Threat Siblings: 2
- Risk Distribution: 3 medium-risk, 2 low-risk, 0 high-risk
Notable Neighbor IPs:
| IP Address | Risk Score | Authority Score |
|---|---|---|
| 117.187.180.20 | 0 | 50 |
| 117.187.180.162 | 50 | 50 |
| 117.187.180.166 | 50 | 50 |
| 117.187.180.215 | 50 | 50 |
| 117.187.180.236 | 25 | 50 |
## Observation History
- Total Observations: 15 signals
- Most Recent: 2026-06-25 (multiple observations within 2-minute window)
- Geolocation Consensus: China (CN) - confirmed via multi-signal inference
- Ownership Changes: 0
- Threat Persistence Days: 0
- Persistently Malicious: No
## Network Behavior
- BGP Prefix: 117.187.180.0/23
- Route Stability: False
- RPKI State: Not available
- DNSSEC Valid: Yes
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
## Relationships
- Network Association: CMNET (China Mobile) - 9 same-network relationships
- No cross-network relationships detected
- No associated hostnames or certificates
## Recommended Actions
No specific firewall rules or mitigation actions recommended at this time. The IP presents low risk with no active threat indicators. Continue monitoring for changes in threat profile or network behavior.
## Analyst Notes
This IP is part of China Mobile's residential CMNET infrastructure. The subnet shows mixed classification with some neighbors exhibiting medium risk scores (50), suggesting potential localized abuse activity. However, this specific IP (117.187.180.251) maintains a clean threat profile with zero risk score and no blacklist associations. No immediate blocking or filtering is warranted; continue standard monitoring practices.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | IRT-CHINAMOBILE-CN |
| ASN | AS138407 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | APNIC |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 33% | 2 | 4 |
| reputation | 28% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 9 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-09 05:25:20 UTC |
| Last Seen | 2026-06-25 13:00:22 UTC |
| Profile Built | 2026-06-25 13:11:50 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 18 |
Full dossier details are available via our API.