180.119.102.160📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 180.119.102.160/32

Date: 2026-07-30

Classification: Low Risk / Mobile Infrastructure

---

## EXECUTIVE SUMMARY

IP address 180.119.102.160 is a low-risk mobile infrastructure endpoint assigned to China Telecom (China Telecom Corp. Ltd.) within the CHINANET-JS network block. The IP exhibits no active threat indicators, no blacklist entries, and no open service ports. Risk score: 25/100.

---

## TECHNICAL PROFILE

Network Ownership & Classification

• ASN: 4134 (Chinanet Hostmaster)
• Organization: CHINANET-JS
• CIDR Block: 180.96.0.0/11
• RIR: APNIC
• Network Role: Mobile (China Telecom) - LTE/5G connection
• Mobile Carrier: China Telecom (MCC: 460, MNC: 03)

Geolocation

• Country: China (CN)
• GeoValidation: Plausible (8,033 km from observation point)
• Note: ICMP blocked - geolocation validation unavailable

Control Plane Data

• BGP Prefix: 180.96.0.0/11
• DNSSEC: Valid
• DNSBL Listed: 1 of 8 total lists
• Route Stability: False
• Operator Score: 0.1304 (Minimal)

---

## THREAT INDICATORS

Services & Ports

• Open Ports: None detected
• HTTP/HTTPS: No services
• DNS Records: None
• Email Authentication: No SPF/DMARC records
• TLS Certificates: None

---

## OBSERVATION HISTORY

Total Observations: 16 signals recorded

Recent Activity: 2026-07-30 (latest)

Signal Types Observed:

• Network role classification (confidence: 0.30)
• Banner analysis (confidence: 0.30)
• Traceroute/probe (confidence: 0.50) - ICMP blocked
• Ownership stability (confidence: 0.85)
• Port scanning activity (confidence: 0.70)

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 0
• Persistently Malicious: No

---

## NEIGHBORHOOD ANALYSIS (180.119.102.0/24)

Subnet Classification: Clean

Abuse Density: 0%

Total Siblings: 8

Active Siblings: 4

Threat Siblings: 0

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 5

Notable Neighbors:

• 180.119.102.25 (Risk: 25, Authority: 50)
• 180.119.102.49 (Risk: 25, Authority: 50)
• 180.119.102.70 (Risk: null, Authority: null)
• 180.119.102.112 (Risk: 25, Authority: 50)
• 180.119.102.220 (Risk: null, Authority: null)
• 180.119.102.226 (Risk: 0, Authority: 50)
• 180.119.102.245 (Risk: 25, Authority: 50)

Relationship Graph: 4 relationships detected, all classified as "Same Network" (CHINANET-JS)

---

## SOC RECOMMENDATIONS

Immediate Actions

• No firewall rules required - Risk score indicates minimal threat
• No blocking or rate-limiting actions recommended based on current profile

Monitoring Parameters

• Monitor for changes in service exposure (new open ports)
• Track blacklist status changes (currently 0 entries)
• Observe for any movement in threat feed classifications
• Watch for DNSBL listing additions

Contextual Considerations

• Mobile carrier endpoint with no detectable services
• Subnet shows clean classification with low abuse density
• No evidence of persistent malicious activity
• Geolocation validation limited due to ICMP blocking

---

## CONCLUSION

IP 180.119.102.160 is a benign mobile infrastructure address within China Telecom's mobile network. No immediate threat indicators present. Continue standard monitoring but no defensive actions required at this time.

Classification: LOW RISK

Action Required: None

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.