123.123.113.194📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

## Target: 123.123.113.194/32

Classification: LOW RISK — NETWORK INFRASTRUCTURE

Report Date: 2026-07-29

---

## EXECUTIVE SUMMARY

IP 123.123.113.194 is classified as low-risk (score: 25/100) with no active threat indicators. The address belongs to UNICOM-BJ (ASN 4808) infrastructure in Beijing, China. No malicious campaigns, blacklists, or exploit activity detected. IP is currently firewalled with no open services.

---

## OWNERSHIP & GEOLOCATION

• Network Block: 123.112.0.0/12
• Organization: UNICOM-BJ (sun ying)
• ASN: 4808
• Registry: APNIC
• Location: Beijing, China (CN)
• Geolocation Confidence: 52% (multi-signal inference)
• Control Plane: Route stability flagged; BGP prefix 123.123.64.0/18

---

## THREAT ASSESSMENT

Risk Score: 25 (Low Risk)

---

## NETWORK SERVICES

• Open Ports: None detected
• DNS: No forward resolution; PTR records absent
• HTTP/HTTPS: No services detected (firewalled)
• TLS Certificates: None
• Classification: Firewalled / No Services

---

## NEIGHBORHOOD ANALYSIS

Subnet: 123.123.113.194/24

• Abuse Density: 0% (clean)
• Sibling IPs: 0 active
• Threat Siblings: 0
• Risk Distribution: No high/medium risk neighbors detected

---

## OBSERVATION HISTORY

Total Signals: 16 observations

• Recent Activity: Signals observed on 2026-07-29
• Threat Persistence: 0 days
• Ownership Changes: 0
• Malicious Activity: None observed

Geo validation attempted via ICMP; probe blocked (unable to validate). Minimum possible RTT: 154.5ms.

---

## RELATIONSHIPS

• 3 Relationships Identified: All linked to UNICOM-BJ network infrastructure

---

## SOC ACTIONS & RECOMMENDATIONS

Current Status

No active blocking or monitoring required. IP does not warrant defensive action based on current profile.

Firewall Rules

No recommended firewall rules generated.

Monitoring Thresholds

• Risk Score Threshold: 25 (below typical SOC alert threshold of 50-75)
• Watch List: Not recommended
• Block List: Not recommended

---

## INTELLIGENCE NOTES

1. Infrastructure IP with no active services; typical for backend network or reserved address space

2. No correlation with known threat actors or campaigns

3. Clean neighborhood profile with no adjacent threat activity

4. Control plane routing stability flags noted but not indicative of malicious behavior

5. DNSBL presence minimal (1 of 8 lists); requires no action at current risk level

---

Report Generated: IPDebrief Intelligence Platform

Analysis Level: Defensive Network Intelligence

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.