223.15.226.253
## Intelligence Briefing: IP 223.15.226.253
Classification: Low Risk / Benign Infrastructure
Profile Summary
The IP address 223.15.226.253 belongs to China Telecom's infrastructure network (IRT-CHINANET-SX, ASN 132153) within the 223.15.0.0/16 CIDR block registered with APNIC. The profile indicates minimal risk with a risk score of 0. The address is geolocated to China (CN) with an accuracy radius of 2,500 km. Control plane data confirms valid RPKI state (223.15.224.0/21 prefix) and stable routing through AS7018 and AS4134.
Threat Indicators
No threat indicators were detected. The IP is not listed on any threat feeds, maintains zero blacklist entries, and exhibits no known campaign associations. Abuse confidence score is null with no observed malicious activity. The IP is not identified as a Tor exit node, known attacker, or spam source.
Network Role & Services
The address is classified as provider infrastructure with no active services detected. All ports appear firewalled, and no open services were observed across DNS, TLS, or HTTP protocols. No certificates are associated with the address, and no PTR records exist.
Neighborhood Analysis
The /24 subnet (223.15.226.253/24) shows zero neighbor IPs with no threat siblings. Abuse density is 0, indicating a clean neighborhood with no correlated malicious activity.
Observation History
Historical data shows 16 observations with consistent signals since 2026-07-30. Route origin validation remained valid with confidence 0.95. Ownership registration shows stability with zero ownership changes. Geolocation inferences consistently point to China with confidence 0.52. Network registration data from APNIC confirms organization IRT-CHINANET-SX with confidence 0.90-0.95.
Behavioral Indicators
Behavioral analysis returned zero honeypot hits, zero enumeration strikes, and zero WAF violations. No total incidents were recorded. The IP is not classified as persistently malicious.
Recommended Actions
No security actions or firewall rules were recommended. The IP profile presents no threat requiring mitigation.
Assessment
This IP represents legitimate Chinese telecommunications infrastructure with no malicious indicators. The profile is consistent with China Telecom's operational network. SOC teams may
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-CHINANET-SX |
| ASN | AS132153 |
| Network Name | sxpdsn |
| CIDR Block | 223.15.0.0/16 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-26 21:28:17 UTC |
| Last Seen | 2026-08-05 12:20:18 UTC |
| Profile Built | 2026-07-30 09:59:24 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.