47.93.118.200📋 Copy

# IP INTELLIGENCE BRIEFING: 47.93.118.200

Date: 2026-07-31

Classification: Moderate Risk

Risk Score: 50/100

---

## EXECUTIVE SUMMARY

IP address 47.93.118.200 presents a moderate risk profile with geolocation data indicating origin from China (Beijing). The IP is associated with ASN 37963 and operates within the 47.92.0.0/15 BGP prefix. While currently showing minimal active threat indicators, the IP is listed on 2 of 8 DNSBLs with maximum severity rating "high."

## KEY FINDINGS

Geolocation: Beijing, China (CN) - High confidence geo consensus achieved. RTT and distance validation pending.

Network Classification:

• ASN 37963 with BGP origin 47.92.0.0/15
• Service Purpose: Firewalled / No Services
• No active services detected (all open ports: [])
• No TLS certificates or HTTP banner information available

Threat Indicators:

• Blacklist count: 0 (current threat feed results)
• DNSBL listings: 2/8 total lists
• No known campaigns or threat feed matches
• Abuse Confidence Score: Not assigned

Neighborhood Analysis (47.93.118.0/24):

• Subnet classification: Mostly clean
• Abuse density: 1
• Inherited risk: 2
• No sibling IPs returned in neighbor query

Historical Observations (13 signals):

• Most recent signals from 2026-07-31
• DNSSEC validation confirmed as valid
• No persistent malicious behavior detected
• One threat observation recorded

## NETWORK BEHAVIOR

The IP shows no active service exposure and has been classified as firewalled with no open ports. Forward DNS resolution failed to resolve PTR records or hostnames. No email authentication mechanisms (SPF/DMARC) were configured for any associated domains.

## RECOMMENDED ACTIONS

Based on the risk profile, the following firewall rules are recommended:

## ANALYST NOTES

While the IP lacks active threat indicators and shows no open services, the presence on multiple DNSBLs with high severity rating warrants continued monitoring. The moderate risk score of 50 suggests potential for future malicious activity. Recommend adding to monitoring lists and implementing the recommended blocking rules, particularly for inbound traffic filtering.

Status: Monitor/Block

Priority: Medium

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.