220.246.47.169📋 Copy

# Intelligence Briefing: 220.246.47.169/32

Classification: HIGH RISK

Date: Current Assessment

Assessment ID: IP-220.246.47.169-INT

## Executive Summary

IP address 220.246.47.169 is classified as HIGH RISK with an overall risk score of 80/100. The address is registered to HKT Limited (ASN 4760) in Hong Kong and is associated with the Netvigator service provider network. The IP is currently listed on 5 of 8 DNS blacklists, indicating active reputation issues.

## Profile Overview

## Threat Indicators

• DNSBL Listings: 5 lists flagged (of 8 total checks)
• Known Attacker Status: Not flagged
• Tor Exit Node: False
• Spam Source: Not confirmed
• Campaign Activity: No known campaign associations

## Network Services Observed

• Port 22/TCP: SSH service running OpenSSH_6.9
• Email Authentication: SPF and DMARC records present on associated domain

## Historical Observation Summary

Total observations: 26 signals across multiple dimensions including threat indicators, routing, services, ownership, reputation, and geolocation. Key historical observations include:

• 2026-06-25: Recent routing and reputation assessments with operator score 0.3478
• 2026-06-17: Campaign correlation analysis showing no associated campaigns
• 2026-06-05: Port scanning activity detected with SSH banner identification
• ASN/Prefix Confirmation: Consistent reporting of ASN 4760 and prefix 220.246.40.0/21

## Network Neighborhood Analysis

Subnet: 220.246.47.169/24

• Total Neighbors: 2 active siblings
• Abuse Density: 0 (subnet-level)
• Risk Distribution: 2 medium-risk neighbors, 0 high-risk

Related IPs:

• 220.246.47.145: Risk Score 40/100 (Medium)
• 220.246.47.146: Risk Score 70/100 (High)

Relationship Graph: 77 total relationships identified, including multiple NETVIGATOR network associations and DNS hostname associations.

## Recommended Actions

Based on the risk profile and threat indicators, the following actions are recommended:

1. Firewall Rule: Consider blocking inbound traffic to this IP if not required for legitimate business operations

2. Monitoring: Add to threat monitoring lists for continued observation

3. DNS Filtering: Block DNS queries for associated domains if spam/blocking is required

4. Incident Response: Investigate any incoming connections from this source

## Intelligence Assessment

The IP address 220.246.47.169 presents a moderate-to-high threat profile primarily due to DNS blacklist listings and historical scanning activity. While the subnet shows relatively low abuse density, the individual IP's risk score of 80 warrants defensive measures. The association with Netvigator's residential proxy infrastructure in Hong Kong is consistent with the observed risk profile.

---

*Report generated from IPDebrief intelligence platform data.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.