180.119.102.49📋 Copy

# IP Intelligence Briefing: 180.119.102.49/32

## Executive Summary

IP address 180.119.102.49 is a mobile endpoint originating from China's CHINANET infrastructure. Current risk assessment indicates Low Risk profile with minimal threat indicators. The IP is classified as a mobile device on China Telecom's LTE/5G network and presents no evidence of active malicious activity.

## Infrastructure Profile

## Risk Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• DNSBL Listings: 1 of 8 total lists
• Reputation Sources: None identified

## Network Services

• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None
• Server Banner: No response
• Service Purpose: Firewalled / No Services
• DNS Resolution: Forward resolution not confirmed (0 PTR records)

## Control Plane Analysis

• Route Stability: Stable
• BGP Prefix: 180.96.0.0/11
• RPKI State: Not validated
• DNSSEC Valid: Yes
• Route Changes (30d): 0
• IS-MOAS: No
• Delegation Age: Not applicable

## Temporal Indicators

• Ownership Changes: 0
• Threat Persistence: 0 days
• Threat Observation Count: 0
• Persistently Malicious: No
• Last Updated: July 29, 2026

## Observation History

Ten observation signals recorded. Recent observations (July 29, 2026) include:

• Geo-location validation for China (China, 34.7732 N, 113.722 E)
• ASN attribution: CHINANET-BACKBONE (allocated 2009-07-23)
• DNSSEC validation: Confirmed
• DNS listings: 1 out of 8 total lists (max severity: high)
• PTR records: Not configured

## Network Neighborhood Analysis (180.119.102.0/24)

• Total Neighbors: 5
• Abuse Density: 0
• Risk Distribution: 2 Low Risk, 0 Medium, 0 High
• Neighbor Risk Scores:

- 180.119.102.25: Risk N/A

- 180.119.102.112: Risk 0, Authority 50

- 180.119.102.160: Risk N/A

- 180.119.102.226: Risk N/A

- 180.119.102.245: Risk 25, Authority 50 (same risk profile as target)

## Relationship Graph

• Same Network: CHINANET-JS (2 relationships)
• External Entities: None identified
• Hostnames/Certificates: None resolved

## Threat Intelligence Indicators

• Campaign Matches: 0
• Certificate Matches: 0
• Correlated IPs: 0
• Known Campaigns: None identified
• Threat Feeds: No indicators

## Recommended Security Actions

Based on the low-risk profile and lack of malicious indicators, no immediate blocking or firewall rules are required. Standard network logging and monitoring practices are appropriate.

## Conclusion

IP 180.119.102.49 is a legitimate mobile endpoint on China Telecom's network infrastructure. The IP demonstrates stable routing, valid DNSSEC, and no evidence of malicious activity. The subnet environment shows low abuse density with a similar risk profile across neighboring addresses. No further investigation is recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.