222.211.75.201📋 Copy

# IP Intelligence Briefing: 222.211.75.201

Classification: Low Risk / Infrastructure

Date: Current Assessment

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP address 222.211.75.201 is registered to China Telecom's CHINANET-SC network infrastructure. The address demonstrates a low-risk profile with no active threat indicators, no open services, and no evidence of malicious activity. The IP resolves to a dynamic broadband hostname pattern typical of residential or small business connections in the Sichuan province region.

---

## NETWORK OWNERSHIP

The IP belongs to a large Chinese telecommunications provider with significant infrastructure. The organization name indicates this is part of China's national telecom network.

---

## GEOLOCATION

• Country: China (CN)
• Inferred Region: Sichuan (based on hostname pattern "my.sc")
• Confidence: Moderate (52%)
• Accuracy: ~2,500 km radius
• Method: Multi-signal inference

The hostname pattern "201.75.211.222.broad.my.sc.dynamic.163data.com.cn" indicates this is likely a dynamic residential broadband assignment from China Telecom's Sichuan province operations.

---

## THREAT INDICATORS

DNSBL Status: The IP is listed on 1 out of 8 DNSBL lists with maximum severity "high." This appears to be a false positive or temporary listing given the overall low-risk profile.

---

## NETWORK SERVICES

• Open Ports: None detected
• HTTP/HTTPS: No services responding
• TLS Certificates: None
• Service Classification: Firewalled / No Services

The IP does not expose any network services, which is consistent with either residential broadband or a firewall-protected endpoint.

---

## DNS ANALYSIS

• PTR Record: 201.75.211.222.broad.my.sc.dynamic.163data.com.cn
• Forward Resolution: Unconfirmed (static hostname)
• Hosted Domains: 0
• Email Authentication: No SPF, DMARC, or TXT records detected

The DNS configuration is typical for a residential IP address with no reverse DNS verification capability.

---

## OBSERVATION HISTORY

Total Observations: 16 signals over monitoring period

Recent Activity:

• 2026-07-22T13:12:50 – Network classification signal (confidence 30%)
• 2026-07-22T13:12:36 – Geolocation signal: CN, confidence 52%
• 2026-07-22T13:09:58 – Control plane operator score: 0.15 (Minimal)
• 2026-07-22T13:09:53 – DNSBL listing detected (8 total lists, 1 listed)

The IP has maintained a stable profile with no significant changes in threat posture. The single DNSBL listing represents minimal exposure.

---

## NEIGHBORHOOD ANALYSIS

The /24 subnet shows no neighbor activity and zero abuse density, indicating this IP is isolated from other problematic addresses in its network block.

---

## RELATIONSHIP GRAPH

Detected Relationships (5 total):

• 3x Same Network: CHINANET-SC
• 2x DNS Association: 201.75.211.222.broad.my.sc.dynamic.163data.com.cn

The IP has no relationships with other IP addresses, hostnames, or certificates beyond its own network assignment.

---

## RECOMMENDATIONS

Security Actions:

1. No blocking required – Risk score of 25 indicates minimal threat

2. Monitor DNSBL status – One listing detected; verify if legitimate

3. No firewall rules needed – No services exposed, residential infrastructure

Classification: Monitor as benign Chinese residential infrastructure. No immediate action required.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.