119.28.89.249📋 Copy

IP Intelligence Briefing: 119.28.89.249

Date: 2026-06-17

---

**1. Risk Profile**

• Overall Risk Score: 25 (Low Risk)
• Threat Indicators: No malicious activity detected (no malware, phishing, or C2 indicators).
• Geolocation: Hong Kong (HK), with a validated distance of 9,173.5 km from the probe. ICMP validation failed, preventing full geographic confirmation.
• Network Ownership: Registered to TencentCloud (ASN 132203), a legitimate Chinese cloud provider.

---

**2. Network Behavior**

• Subnet: 119.28.89.249/24
• Neighbor Analysis: No active IPs detected in the subnet (neighborCount: 0). Subnet abuse density is 0%, suggesting minimal malicious activity in the broader network.
• BGP/Routing:

- Origin ASN: 132203 (TencentCloud).

- Route stability: Unstable (isRouteStable: false).

- DNSSEC validation: Enabled.

---

**3. Historical Observations**

• Last 30 Days:

- Single observation recorded (confidence: 0.24).

- No persistent threats or repeated scans detected.

- No DNS or service anomalies noted.

---

**4. Relationships & Context**

• Linked Entities:

- Directly tied to TencentCloud (AS132203).

- No linked domains, certificates, or subnets.

• Services: No open ports, TLS certificates, or HTTP services detected.

---

**5. Recommendations**

• Monitor Geolocation: Validate IP’s geographic context using alternative methods (e.g., DNS leaks, HTTP headers).
• Check Subnet Activity: Investigate why no neighbors were detected in the 119.28.89.0/24 subnet. Could indicate restricted or private network segmentation.
• Maintain Baseline: No immediate mitigation required, but continue monitoring for anomalies due to ICMP validation failures.

---

Source: IPDebrief Threat Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.