211.105.231.21📋 Copy

IP Intelligence Briefing: 211.105.231.21

Date: 2026-06-05

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Ownership:

- ASN: 4766 (IP Manager)

- Country: South Korea (KR)

- Mobile Carrier: KT Corporation (MCC 450, MNC 08)

• Geolocation:

- City: Wanju, Jeollabuk-do, South Korea

- Coordinates: 35.83°N, 127.04°E

- Timezone: Asia/Seoul

---

**2. Threat Indicators**

• DNSBL Listings:

- Listed in 5/8 DNSBL feeds (e.g., Spamhaus, Barracuda).

- No active malware or exploit indicators detected.

• Network Role:

- Mobile Carrier (KT) LTE/5G infrastructure.

- No public services (ports, TLS, HTTP) observed.

---

**3. Observation History**

• Recent Activity (Last 30 Days):

- 16 observations, with 5 DNSBL listings.

- Geolocation consistency: Plausible (South Korea).

- No persistent threat signals (e.g., malware, C2).

---

**4. Relationships**

• Network Associations:

- Linked to KORNET-KR (KT's network).

- No external hostnames or domains resolved.

• DNS Associations:

- Failed DNS queries to internal IP (192.168.2.108), suggesting potential internal network testing.

---

**5. Neighborhood Analysis**

• Subnet: 211.105.231.21/24
• Abuse Density: 0% (no malicious neighbors detected).

---

**6. Recommendations**

• Monitoring: Track DNSBL listings and monitor for unexpected network behavior.
• Blocking: Consider blocking based on mobile carrier classification if suspicious activity persists.
• Investigation: Validate DNS query failures to rule out internal network testing or misconfigurations.

Note: This IP is part of a mobile carrier's infrastructure, which may have legitimate traffic. However, DNSBL listings warrant further scrutiny.

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.