122.247.10.24📋 Copy

# INTELLIGENCE BRIEFING: IP 122.247.10.24/32

Classification: Moderate Risk (Score: 40)

Date: July 2026

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

Target IP 122.247.10.24 is associated with CHINANET ZHEJIANG (ASN 4134) under APNIC registration. Risk assessment indicates moderate risk level with no active threat indicators. The IP operates on a mobile carrier network (China Telecom) with no observed services or open ports.

---

## OWNERSHIP & GEOLOCATION

Geolocation confidence is low (accuracy radius: 2,500 km). Geographic validation marked implausible.

---

## THREAT ASSESSMENT

Risk Score: 40/100 (Moderate)

Abuse Confidence: Not applicable

Threat Indicators: None detected

Blacklist Status: Clean (0 lists)

Tor/Proxy/VPN: Negative indicators

Campaign correlation: No matches. No known attacker or spam source designation.

---

## NETWORK PROFILE

• Services: Firewalled / No Services
• Open Ports: None observed
• DNS Records: No PTR hostnames, no forward resolution
• Email Authentication: SPF/DMARC absent
• Certificate Status: No TLS certificates

Control Plane: Route stability flagged as false; 0 route changes in 30-day window. Operator score 0.1304 (Minimal).

---

## OBSERVATION HISTORY

13 historical observations recorded. Recent activity includes geolocation validation attempts with conflicting data (claimed latitude 34.7732N, longitude 113.722E, 8,033 km from reference point). ICMP validation attempts resulted in blocked responses.

---

## SUBNET ANALYSIS (122.247.10.0/24)

• Abuse Density: 0 (Clean)
• Threat Siblings: 0
• Active Siblings: 0
• Classification: Clean

No neighboring IPs exhibit threat activity.

---

## RELATIONSHIPS

Single relationship identified: Same network association with CHINANET-ZJ-NB. No connections to external hostnames, organizations, or certificates.

---

## RECOMMENDED ACTIONS

Given the moderate risk score and mobile carrier association:

```bash

# iptables

iptables -A INPUT -s 122.247.10.24 -j DROP

# nftables

nft add rule inet filter input ip saddr 122.247.10.24 drop

# Cloudflare WAF

Expression: ip.src eq 122.247.10.24 → Block

# AWS WAF

Address: 122.247.10.24/32 → Block

```

Note: These recommendations are probabilistic and should be combined with other signals before taking action.

---

## ANALYST NOTES

This IP exhibits characteristics of a residential/mobile connection from Chinese infrastructure. The absence of open ports and threat indicators suggests benign or low-risk activity. The moderate risk score (40) may warrant monitoring but does not require immediate blocking without corroborating evidence.

---

*Intel generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.