183.7.135.149📋 Copy

# IP Intelligence Briefing: 183.7.135.149/32

## Executive Summary

IP address 183.7.135.149 is a moderate-risk Chinese infrastructure address with no active malicious indicators. The address belongs to the CHINANET-GD network (AS140308) and shows clean neighborhood characteristics with minimal abuse density.

---

## Profile Overview

## Threat Indicators

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listed: 2 of 8 total lists
• Active Threat Feeds: None
• Known Campaigns: None

## Network Services

• Open Ports: None detected
• TLS Certificates: None
• Hosted Domains: 0
• Email Authentication: No SPF/DMARC records

## Neighborhood Analysis

• Subnet: 183.7.135.149/24
• Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor IP: 183.7.135.38 (risk score not available)

## Temporal Analysis

• Ownership Changes: 0
• Threat Observation Count: 0
• Persistent Malicious Activity: False
• Threat Persistence Days: 0

## Observation History (16 signals)

Recent observations (2026-07-23) indicate stable infrastructure characteristics:

• Consistent ownership attribution to CHINANET-GD
• Subnet classification maintained as "clean"
• Geographic validation limited (ICMP blocked)
• No escalation in threat signals

## Recommended Actions

Based on the moderate risk score of 40, consider the following:

Firewall Rules:

```

iptables -A INPUT -s 183.7.135.149 -j DROP

nft add rule inet filter input ip saddr 183.7.135.149 drop

deny 183.7.135.149; # nginx

```

WAF Configuration:

• Cloudflare WAF: Block with expression `ip.src eq 183.7.135.149`
• AWS WAF: Add `183.7.135.149/32` to rule set with description "IPDebrief risk 40"

Assessment: Blocking is recommended but not mandatory. The IP lacks active threat indicators and belongs to a clean subnet. Monitor for service activation or reputation changes.

---

Analyst Notes: This infrastructure IP shows no evidence of malicious activity. The moderate risk score likely reflects geographic/operational factors rather than active abuse. No immediate threat action required if baseline operations permit.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.