222.107.254.230
IP Intelligence Briefing: 222.107.254.230
*Generated via IPDebrief Threat Intelligence Platform*
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Ownership:
- ASN: 4766 (KT Corporation, South Korea)
- Network: KORNET-KR (APNIC)
- Geolocation: Seoul, South Korea (37.5°N, 127.12°E)
- Network Role: Mobile carrier (KT, LTE/5G)
- Threat Indicators: No malicious activity detected (no known campaigns, blacklists, or Tor associations).
---
**2. Observation History**
- Abuse Density: 0% (clean classification)
- DNSSEC: Validated
- DNSBL Listings: 2 out of 8 monitored lists (no active threats).
- BGP Prefix: 222.104.0.0/13 (managed by KT Corporation).
- Stability: Route stability flagged as unstable (recent changes).
---
**3. Network Relationships**
- Shared Network: Linked to KORNET-KR (KT’s mobile network).
- Subnet: 222.107.254.0/24 (10 total IPs, 1 active).
- Neighbor Risk:
- 6 IPs with moderate risk (50/100).
- 3 low-risk IPs (25/100).
- 0 high-risk IPs.
---
**4. Actionable Insights**
- Monitor: DNSBL listings and BGP route stability.
- Firewall Rules:
- Block traffic to/from 222.107.254.230/32 if untrusted.
- Track neighbor IPs with moderate risk (e.g., 222.107.254.30, 222.107.254.94).
- Context: Mobile carrier IP; potential for legitimate traffic but low threat.
---
Conclusion: This IP is part of a South Korean mobile carrier network with no direct malicious indicators. While DNSBL listings and route instability warrant monitoring, it does not currently pose an active threat. Focus on subnet neighbors and BGP health for further analysis.
*Generated by IPDebrief | © 2026 Jason Alberino*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IP Manager |
| ASN | AS4766 |
| Network Name | KORNET-KR |
| CIDR Block | 222.96.0.0/12 |
| RIR | APNIC |
| Country | KR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 30% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 14% | 6 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-20 11:46:32 UTC |
| Last Seen | 2026-06-09 03:31:19 UTC |
| Profile Built | 2026-06-09 03:46:59 UTC |
| Data Freshness | Live |
| Signal Types | 14 |
| Total Observations | 20 |
Full dossier details are available via our API.