223.76.158.107
IP Intelligence Briefing: 223.76.158.107
Date: 2026-06-10
---
**Core Profile**
- Risk Score: Moderate (50/100)
- Ownership: China Mobile (ASN 9808, CMNET)
- Geolocation: Wuhan, Hubei, China (30.59°N, 114.27°E)
- Network Role: Mobile Carrier (LTE/5G)
- Threat Status: No active indicators (no malware, spam, or known attacker associations).
---
**Key Observations**
1. DNS & Security
- DNSSEC valid, but listed in 2 DNSBLs (potential spam or abuse risk).
- No open ports, TLS certs, or HTTP services detected.
2. Network Behavior
- Stable ownership (no recent changes).
- BGP route stability: 0 changes in 30 days; route is marked as "Minimal" operator risk.
3. Historical Trends
- Observed 13 times since June 2, 2026, with consistent geolocation and network metadata.
- No spikes in threat signals or abnormal activity.
---
**Relationships**
- Linked to CMNET (China Mobile’s mobile carrier network).
- No direct connections to known malicious entities, subnets, or domains.
---
**Neighborhood Analysis**
- Subnet: 223.76.158.0/24
- Neighbor Count: 0 (no sibling IPs detected).
- Abuse Density: 0% (no risky neighbors identified).
---
**Recommendations**
1. Monitor DNSBL status and verify if listings are false positives.
2. Track DNSSEC validation and BGP route stability for network integrity.
3. No immediate mitigation required, but maintain monitoring for unusual traffic patterns.
Conclusion: This IP is part of a legitimate mobile carrier network with no active threat indicators. While DNSBL listings suggest potential abuse, further investigation is recommended to confirm context. No urgent action is required.
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-CHINAMOBILE-CN |
| ASN | AS9808 |
| Network Name | CMNET |
| CIDR Block | 223.64.0.0/11 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 20% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Fresh
| First Seen | 2026-05-23 00:20:12 UTC |
| Last Seen | 2026-06-26 18:11:11 UTC |
| Profile Built | 2026-06-24 15:44:39 UTC |
| Data Freshness | Fresh |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.