222.222.124.164📋 Copy

IP Intelligence Briefing: 222.222.124.164

*Generated using IPDebrief tools: Profile, History, Relationships, and Neighborhood Analysis*

---

**Core Profile**

• Risk Score: 80 (High Risk)
• Ownership:

- ASN: 4134 (Chinanet Hostmaster)

- Organization: China Telecom

- Geolocation: Baoding, Hebei, China (latitude: 38.8729, longitude: 115.4625)

• Network Role: Mobile LTE/5G (China Telecom)
• Threat Indicators:

- 6 DNSBL listings (abuse confidence score: 0.13)

- No open ports, no TLS/HTTP services, no known campaigns

• Mobile Carrier: China Telecom (MCC: 460, MNC: 03)

---

**Observation History**

• Recent Activity (June 2–7, 2026):

- Consistent geolocation in Baoding, China.

- DNSBL listings increased from 6 to 8 in 3 days.

- Operator score remains low (0.13), indicating potential abuse.

• Stability: Unstable routing (route changes in last 30 days).

---

**Relationships**

• Network Links:

- Same network: CHINANET-HE (China Telecom)

- Repeated DNS associations with `164.124.222.222.broad.lf.he.dynamic.163data.com.cn` (dynamic IP, likely residential/mobile).

• No Linked Threat Entities: No malware campaigns, domains, or certificates associated.

---

**Neighborhood Analysis**

• Subnet: 222.222.124.0/24
• Abuse Density: 1 (mostly clean, but low threshold).
• Neighbors: 0 active IPs in subnet (no sibling IPs observed).

---

**Actionable Insights**

1. Monitor DNSBL Listings: The IP is listed on 8 DNSBLs (6 confirmed). Investigate if this is a compromised device or misconfigured network.

2. Check Mobile Network Context: China Telecom’s LTE/5G IP range often includes residential/mobile users. Verify if this IP is associated with known malicious mobile activity.

3. Block/Restrict Traffic: Given the high risk score and DNSBL listings, consider blocking traffic from this IP or adding it to firewall rules (e.g., iptables, Cloudflare WAF).

4. Validate Geolocation: While geolocation matches China, the IP’s dynamic nature (DNS hostname) suggests potential spoofing or misattribution. Cross-check with other sources.

---

*Generated by IPDebrief. All data sourced from public threat intelligence and network telemetry.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.