183.251.233.69📋 Copy

INTELLIGENCE BRIEFING: IP 183.251.233.69/32

Classification: MODERATE RISK (Score: 65)

Date: Current Assessment

---

OWNERSHIP & ATTRIBUTION

IP 183.251.233.69 is assigned to ASN 9808 (haijun li) under the CMNET network block (183.192.0.0/10). The address is registered through APNIC and is currently attributed to China Mobile infrastructure. The IP operates on a mobile carrier network (China Mobile, MCC 460, MNC 00) utilizing LTE/5G connection technology.

GEOGRAPHIC CONTEXT

Geolocation data consistently places the address in China (CN), specifically Fujian province. Multiple geolocation signals converge on this location with moderate confidence. No precise city-level data available; accuracy radius spans 2,500km.

THREAT INDICATORS

• DNSBL Listings: 3 out of 8 total DNS blacklists show listings for this IP (max severity: high)
• Reputation: Moderate risk designation with no current active threat campaigns detected
• Malicious Classifications: Not flagged as Tor exit, known attacker, or spam source
• Abuse Confidence: Variable (data shows 0.15–0.52 confidence across signals)

NETWORK CHARACTERISTICS

• Service Status: No open ports detected; classification indicates "Firewalled / No Services"
• DNS Resolution: No forward DNS resolution confirmed; no PTR hostnames
• Mobile Classification: Confirmed mobile network origin (not residential, hosting, or cloud infrastructure)
• Route Stability: BGP prefix 183.251.232.0/21 shows route instability

TEMPORAL ANALYSIS

Observation history contains 15 data points with the most recent signals from June 2026. Historical data shows:

• Blacklist activity present across multiple reputation feeds
• Network classification signals showing minimal operator risk (0.1304 operator score)
• No persistent malicious behavior detected over observation period

RELATIONSHIP MAPPING

The IP exhibits 14 relationship links, all pointing to CMNET network identifiers. No organizational or certificate relationships identified.

NEIGHBORHOOD ASSESSMENT

Subnet 183.251.233.69/24 shows:

• Abuse density: 0
• Sibling IPs: 1 total, 0 active
• Classification: Clean
• No inherited risk from neighboring addresses

RECOMMENDED ACTIONS

1. Monitor: Maintain monitoring due to moderate risk score (65) and multiple DNSBL listings

2. Allow: No immediate blocking required; IP not classified as high-confidence threat actor

3. Investigate: If traffic patterns from this IP show unusual behavior, correlate with mobile carrier logs for source validation

RISK ASSESSMENT SUMMARY

This IP represents moderate-risk infrastructure originating from China Mobile's mobile network in Fujian. While no active threat indicators are present, the IP carries multiple DNSBL listings and shows route instability. Recommended as monitored traffic rather than blocked, with investigation triggered only on anomalous behavioral patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.