220.180.99.71📋 Copy

# IP Intelligence Briefing: 220.180.99.71/32

Classification: Low Risk | Jurisdiction: China (CN) | Provider: Chinanet/China Telecom

## Executive Summary

IP address 220.180.99.71 presents as a low-risk mobile network endpoint from China's CHINANET infrastructure. No active threat indicators, blacklist entries, or malicious campaigns were observed. The IP resolves to a residential mobile connection with no open services.

## Technical Profile

• ASN: 4134 (CHINANET Hostmaster)
• Organization: CHINANET-AH (Anhui region)
• Geolocation: Fuyang, Anhui, China (35.86°N, 104.2°E)
• Network Type: Mobile (China Telecom, MCC 460, MNC 03)
• Connection Technology: LTE/5G
• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Null
• Blacklist Count: 0

## Network Services & DNS

• Open Ports: None detected
• TLS Certificates: None
• PTR Hostnames: None
• Forward Resolution: Unconfirmed
• Email Auth (SPF/DMARC): Not present
• Service Purpose: Firewalled / No Services

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy/VPN: No
• Known Campaigns: None
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Is Persistently Malicious: No

## Historical Activity

Observation history shows 14 recorded signals over the monitoring period. Recent activity includes:

• Consistent CN geolocation inference
• One signal indicating threat feed association (4 pulses)
• No ownership changes or persistent malicious behavior detected
• ICMP validation blocked (expected for residential mobile networks)

## Neighborhood Analysis

• Subnet: 220.180.99.0/24
• Abuse Density: 0%
• Total Siblings: 0
• Threat Siblings: 0
• Active Siblings: 0
• High/Medium Risk Neighbors: None

## Recommended Actions

No firewall rules or blocking actions recommended at this time. The IP exhibits characteristics of a benign mobile network endpoint with no actionable threat signals. Standard monitoring is sufficient.

## Intelligence Notes

The IP resides within the CHINANET-AH prefix (220.180.0.0/16). Mobile carrier association with China Telecom indicates this is a user-accessible IP rather than infrastructure. The absence of open services, combined with zero-risk scoring and no blacklist presence, supports classification as low-risk. Historical threat feed signals warrant continued observation but do not indicate current compromise.

Briefing Generated: 2026-07-30 | Data Sources: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.