202.85.222.190📋 Copy

# IP Intelligence Briefing: 202.85.222.190

## Executive Summary

IP address 202.85.222.190 is associated with the Elink-space network (CIDR: 202.85.208.0/20) operated by Lin Jia in Beijing, China. The IP presents a low-risk profile with a risk score of 25/100 and demonstrates minimal threat indicators across all observed signals.

## Network Classification

• Organization: Lin Jia / Elink-space
• ASN: Not assigned (null)
• Network Type: Firewalled / No Services
• Geolocation: Beijing, China (CN)
• Network Role: Infrastructure / Residential proxy indicators not detected

## Risk Assessment

The IP scored 25 on the overall risk metric, classified as Low Risk. Key risk indicators include:

• No known attacker attribution
• No spam source designation
• No Tor exit node status
• Zero blacklist entries (blacklist count: 0)
• Single DNSBL listing across 8 total lists

Control plane analysis revealed an operator score of 0.2174, labeled as "Minimal." The IP is not classified as a provider, CDN, VPN, proxy, hosting service, or mobile carrier.

## Behavioral Analysis

Historical observation records show 17 signal observations with the most recent activity captured in June 2026. The IP demonstrates:

• Threat Persistence: 0 days
• Threat Observation Count: 1
• Persistently Malicious Status: Not flagged

Geolocation signals consistently place the IP in China with inferred coordinates at latitude 35.86, longitude 104.2, though the accuracy radius remains at 2500 km. DNS resolution signals show valid DNSSEC validation in later observations.

## Network Environment

The /24 subnet (202.85.222.190/24) shows:

• Abuse Density: 0%
• Classification: Mostly clean
• Threat Siblings: 1
• Active Siblings: 0
• Total Siblings: 1

Relationship graph analysis identified 33 relationships, all mapping to the Elink-space network designation. No neighboring IPs were detected within the /24 subnet.

## Service Fingerprint

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Banner Grabs: None
• Forward Resolution: Not confirmed
• Hosted Domains: 0

## Recommended Actions

No specific firewall rules or action recommendations were generated. The low-risk profile suggests standard network policies are appropriate. The IP does not warrant immediate blocking or special handling based on current intelligence.

## SOC Analyst Notes

This IP address represents a firewalled endpoint with no active services. The single threat observation and minimal operator score indicate low malicious activity. The network environment (Elink-space) shows predominantly clean classification. Routine monitoring is recommended, but immediate defensive action is not warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.