222.173.138.250📋 Copy

IP Intelligence Briefing: 222.173.138.250

Date: 2026-06-18

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Ownership: Registered to Xin Ruosheng (CHINANET-SD, ASN 4134, China).
• Geolocation: Mobile network in Qingdao, Shandong, China (latitude/longitude missing).
• Network Role: Mobile (China Telecom LTE/5G), no public services (no open ports, TLS, or HTTP indicators).
• Threat Indicators: No active malicious activity detected; no DNS/IP blacklists, spam, or known attacker associations.

---

**2. Network Context**

• Subnet: 222.173.138.250/24
• Subnet Abuse Density: 1 (mostly clean, but inherited risk score of 2).
• Neighbors: No active neighbors detected in the subnet.
• BGP: Prefix 222.173.0.0/16, managed by CHINANET-SD (APNIC).
• DNSSEC: Validated, but ICMP blocked, preventing geolocation verification.

---

**3. Observation History**

• Last 30 Days:

- Minimal risk score (0.13) with limited signal sources.

- DNSSEC validation failed due to ICMP blockage.

- No persistent malicious activity (threat persistence: 0 days).

- Single observation of network classification as "mostly clean."

---

**4. Relationships**

• Linked to CHINANET-SD (same network provider).
• No connections to known malicious entities, hostnames, or certificates.

---

**5. Recommendations**

• Monitor: Track for emerging threats, given the high-risk score and mobile network context.
• Verify: Investigate DNSSEC validation failures and ICMP blockage to confirm geolocation accuracy.
• Firewall: Consider blocking traffic to this IP if it aligns with known attack patterns or if it correlates with malicious activity in the subnet.

---

Note: No immediate actionable threats detected, but the IP’s high risk score and network configuration warrant continued monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.