120.239.154.26📋 Copy

IP Intelligence Briefing: 120.239.154.26

Date: 2026-06-11

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- AS: AS9808 (China Mobile)

- Organization: China Mobile Communications Corp. (CN)

- Network: CMNET (apnic)

• Geolocation:

- Country: China (CN)

- Region: Guangdong

- City: Guangzhou

- Coordinates: 23.12°N, 113.25°E

• Network Role: Mobile Carrier (LTE/5G)
• Threat Indicators:

- No malicious activity detected (no indicators, blacklists, or campaigns).

- No Tor exit node, spam source, or known attacker associations.

---

**2. Observation History**

• Total Signals: 12 (last 30 days)
• Key Trends:

- DNSSEC validation confirmed for `26.154.239.120.in-addr.arpa`.

- No recent abnormal activity (no spikes in risk or threats).

- ICMP blocked, preventing full geo-validation.

---

**3. Relationships**

• Linked Entities:

- Network: CMNET (same provider/organization).

- Subnet: 120.239.154.0/23 (part of China Mobile’s mobile network).

---

**4. Neighborhood Analysis**

• Subnet: 120.239.154.0/24
• Abuse Density: 0% (low risk).
• Neighbors:

- 120.239.154.105 (risk score: 40, moderate risk).

---

**5. Actionable Insights**

• Firewall Recommendations:

- Block the IP using:

```bash

iptables -A INPUT -s 120.239.154.26 -j DROP

nft add rule inet filter input ip saddr 120.239.154.26 drop

```

- Cloudflare/AWS WAF rules included in the response.

• Monitoring:

- Track DNS activity and subnet changes.

- Monitor for unexpected traffic patterns or new threat indicators.

---

**6. Summary**

This IP is part of China Mobile’s mobile carrier network (LTE/5G) in Guangdong, China. It shows no direct malicious activity but has a moderate risk score. The subnet has low abuse density, but the IP’s association with a mobile carrier warrants cautious monitoring. Use the provided firewall rules for blocking, and continue observing for anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.