218.78.92.139📋 Copy

# IP Intelligence Briefing: 218.78.92.139/32

Classification: Low Risk | Date: Current | Analysis Scope: Comprehensive

---

## Executive Summary

IP address 218.78.92.139 is a low-risk residential infrastructure endpoint associated with CHINANET-SH (China). The address presents minimal threat indicators, with a risk score of 25 and no active malicious activity detected. The IP is classified as "Firewalled / No Services" with no open ports or hosted domains.

---

## Ownership and Geolocation

---

## Threat Assessment

Risk Score: 25 (Low Risk)

Threat Indicators:

• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

Observed Threat Signals:

• One DNSBL listing detected with maximum severity "high"
• No known campaigns or threat feed associations
• No persistent malicious behavior observed

---

## Network Role and Infrastructure

Classification: Firewalled / No Services

Service Status:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None

Network Role Flags:

• Provider: No
• Cloud: No
• CDN: No
• VPN: No
• Proxy: No
• Hosting: No
• Mobile: No
• Residential: No

---

## Neighborhood Analysis

Subnet: 218.78.92.139/24

Neighbor Profile: 218.78.92.200 (Risk Score: 25)

The subnet exhibits low abuse density with no correlated threat siblings, indicating this is a relatively clean residential network segment.

---

## Control Plane Data

• BGP Prefix: 218.78.92.0/22
• Origin ASN: 4811
• Route Stable: No
• DNSSEC: Valid
• RPKI State: Not reported
• IRRs: Not reported
• Route Changes (30d): 0

---

## Historical Observation Summary

Total Observations: 15

Recent Activity (2026-07-29):

• Network classification signals observed
• Ownership stability confirmed (no recent changes)
• Port scanning activity detected
• DNSSEC validation confirmed
• Blacklist listings detected (8 total, 1 listed)

Temporal Indicators:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No
• Threat Observation Count: 0

---

## Relationships

All detected relationships point to the CHINANET-SH network (4 entries), confirming the IP's association with China's major telecommunications infrastructure provider.

---

## Recommended Actions

Current Risk Level: Low

Recommended Actions: None required. The IP presents no actionable threat indicators at this time.

Monitoring Recommendations:

• Maintain standard monitoring protocols for low-risk residential infrastructure
• No immediate blocking or firewall rules recommended
• Monitor for any changes in network role classification or threat indicators

---

## Analyst Notes

This IP address represents typical residential infrastructure within CHINANET-SH's Shanghai allocation. The absence of open services, combined with low abuse density in the neighborhood and no persistent malicious behavior, supports continued standard monitoring without escalation.

Confidence Level: High – Based on 15 observations across multiple signal types with consistent data validation.

---

*Intelligence generated by IPDebrief platform. Data sources include BGP routing, DNS analysis, threat feeds, and network scanning.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.