39.64.104.77📋 Copy

# Threat Intelligence Briefing: 39.64.104.77/32

Classification: Low Risk • Date: 2026-07-28 • Status: Active Monitoring

## Executive Summary

IP address 39.64.104.77 is a mobile infrastructure address operated by China Unicom (ASN 4837) within the 39.64.0.0/11 block. The address presents a low risk profile with no active threat indicators, no open services, and no observed malicious activity in the monitoring period. Recommended action: Allow with standard monitoring.

---

## Profile Overview

## Threat Indicators

• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Associations: None
• DNSBL Listings: 1 of 8 total lists
• Abuse Confidence Score: N/A

## Network Classification

• Infrastructure Type: Mobile Carrier (China Unicom)
• Carrier: China Unicom / China United Network Communications
• Technology: LTE/5G
• Mobile: Yes
• Cloud/CDN/Proxy: No
• Open Ports: None detected
• Active Services: None observed

## Geolocation Data

• Latitude/Longitude: 34.77°N, 113.72°E
• Geo Validation: Plausible (ICMP blocked - unable to validate)
• Distance from Probe: 8,033.2 km
• Minimum Possible RTT: 160.7 ms

---

## Observation History (14 Signals)

Recent Activity (2026-07-28):

• Port scanning detected with no open ports identified
• ICMP validation blocked (unable to probe)
• Trace route completed: 30 hops (target not reached in final hop)
• Subnet classification: Clean (abuse density: 0)
• No ownership changes recorded

Temporal Analysis:

• Threat persistence days: 0
• Threat observation count: 0
• Is persistently malicious: No
• Ownership stability: Stable

---

## Relationship Analysis

Network Relationships:

• Same Network: UNICOM-SD (multiple relationships)
• Hostnames/Domain: None
• Organizations: ChinaUnicom Hostmaster
• Certificates: None

Subnet Context (39.64.104.77/24):

• Neighbor IPs: 0 detected
• Abuse Density: 0 (clean)
• Active Siblings: 0
• Threat Siblings: 0

---

## Recommended Actions

Firewall Rule Recommendation:

```

# No specific firewall rules required

# Standard egress/ingress policies apply

```

---

## SOC Analyst Notes

1. Risk Assessment: This IP is classified as low risk with a score of 25. The mobile carrier classification and lack of open services indicate legitimate infrastructure use.

2. Threat Context: No evidence of malicious activity. The single DNSBL listing appears to be a false positive or low-priority listing given the overall clean profile.

3. Network Behavior: The IP shows no signs of abuse in the 39.64.104.0/24 subnet. No neighboring IPs detected, suggesting this is an isolated endpoint.

4. Investigation Priority: Low. No immediate threat indicators present. Continue standard monitoring protocols.

5. False Positive Consideration: The IP is on the China Unicom mobile network, which may generate traffic patterns that could trigger anomaly detection systems. False positives are possible.

Conclusion: 39.64.104.77 is a legitimate mobile infrastructure IP address from China Unicom with no observed malicious activity. No blocking or special handling required beyond standard network security policies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.