120.26.63.226📋 Copy

# IP Intelligence Briefing: 120.26.63.226/32

Classification: LOW RISK | Date: July 30, 2026 | Analyst: Automated Intelligence System

---

## Executive Summary

IP address 120.26.63.226/32 presents minimal security concerns. The address is assigned to ALISOFT (ASN 37963) within the 120.24.0.0/14 block and is geolocated to Hangzhou, Zhejiang Province, China. No active threat indicators, malicious campaigns, or abuse patterns were detected during comprehensive analysis.

---

## Risk Assessment

---

## Technical Profile

Network Attribution:

• Organization: security trouble / ALISOFT
• ASN: 37963
• BGP Prefix: 120.26.0.0/16
• RIR: APNIC
• CIDR Block: 120.24.0.0/14

Geolocation:

• Country: China (CN)
• Region: Zhejiang
• City: Hangzhou
• Geo Sources: 1 (Consensus: Confirmed)
• Accuracy Radius: 2500 km

Network Role Classification:

• Service Purpose: Firewalled / No Services
• Not classified as: Cloud, CDN, VPN, Proxy, Tor, Hosting, Mobile, Residential
• Anycast: No
• Bogon: No

---

## Threat Intelligence

Active Threat Indicators:

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Associations: None
• Known Threat Feeds: None

Threat Persistence:

• Threat Observation Count: 0
• Threat Persistence Days: 0
• Persistently Malicious: No
• Active Attacker Status: Not detected

---

## Observations & History

Signal History (12 observations):

• Recent signals indicate consistent geolocation to China (Hangzhou, Zhejiang)
• Confidence levels range from 0.30 to 0.85
• No persistent malicious behavior patterns observed
• Ownership changes: 0
• Route stability: False (potential BGP churn)

---

## Network Neighborhood Analysis

Subnet: 120.26.63.226/24

• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0 (Minimal)

Neighbor Profile:

• 120.26.63.170: Risk Score 0, Authority Score 50, Classification: Low Risk

---

## DNS & Services Analysis

DNS Resolution:

• PTR Hostnames: None
• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Authentication (SPF/DMARC): None configured

Open Services:

• No open ports detected
• No TLS certificates
• No HTTP services
• No active email services

---

## Control Plane Data

• Origin ASN: 37963
• RPKI State: N/A
• IRR Consistency: N/A
• Route Changes (30d): 0
• DNSSEC Valid: Yes
• DNSBL Listed: 0 of 8 total lists
• Operator Score: 0.1304 (Minimal)

---

## Recommended Actions

Current Status: No security actions required

Rationale: The IP address demonstrates no malicious indicators, no threat persistence, and no active attack patterns. The address is properly classified as a low-risk infrastructure IP with no services exposed and no threat indicators present.

Firewall Rules: None generated (IP poses no current threat)

---

## Intelligence Narrative

IP 120.26.63.226 is a benign infrastructure address assigned to ALISOFT within a Chinese network block. The address shows no evidence of malicious activity, scanning, or participation in known threat campaigns. Network analysis indicates the IP is firewalled with no publicly accessible services, consistent with legitimate infrastructure use cases. The surrounding /24 subnet demonstrates minimal abuse density with no neighboring threat actors detected. SOC analysts may treat this IP as low-risk and no immediate blocking or monitoring actions are warranted.

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.