IPDebrief

61.153.104.6

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP Intelligence Briefing: 61.153.104.6/32

Classification: Moderate Risk

Date: Current

Analysis: Full profile compiled from IPDebrief intelligence platform

Executive Summary

IP 61.153.104.6 is a Chinese-based address in Hangzhou with a moderate risk score (50/100). The IP belongs to HANGZHOU-SRT-TECHNOLOGY-CO-LTD (ASN 58461) and is currently firewalled with no active services detected. The address shows stable network characteristics with no persistent malicious activity.

Network Attribution

Threat Indicators

Network Services & Infrastructure

Neighborhood Analysis

The /24 subnet contains no neighboring IPs with threat indicators, suggesting this address is not part of a coordinated abuse cluster.

Observation History

The IP demonstrates stable ownership and routing characteristics with no evidence of escalating threat behavior over time.

Control Plane & Routing

Recommended Actions

Based on the risk profile, the following firewall rules are recommended:

iptables:

```

iptables -A INPUT -s 61.153.104.6 -j DROP

```

nftables:

```

nft add rule inet filter input ip saddr 61.153.104.6 drop

```

nginx:

```

deny 61.153.104.6;

```

pfSense:

```

61.153.104.6/32

```

Cloudflare WAF:

```json

{"description":"Block 61.153.104.6 โ€” IPDebrief risk score 50","action":"block","filter":{"expression":"ip.src eq 61.153.104.6"}}

```

AWS WAF:

```json

{"Addresses":["61.153.104.6/32"],"Description":"IPDebrief risk 50"}

```

Intelligence Assessment

This IP represents a moderate-risk address from a Chinese technology company network. The absence of open services, zero blacklist entries, and clean neighborhood profile suggest low immediate threat potential. However, the moderate risk score warrants monitoring. SOC analysts should treat traffic from this IP with standard caution but the lack of active threat indicators reduces priority for immediate investigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐Ÿšซ
Admin Verified Threat โ€” Manually flagged by an IPDebrief analyst on 2026-05-10.
Reason: Port scanning and brute force attacks

๐ŸŒ Geolocation

Country๐Ÿ‡จ๐Ÿ‡ณ China
Regionโ€”
CityHangzhou
Timezoneโ€”
Latitude34.77
Longitude113.72

๐Ÿข Ownership & Registration

OrganizationBing Bai
ASNAS58461
Network NameHANGZHOU-SRT-TECHNOLOGY-CO-LTD
CIDR Block61.153.104.0/23
RIRAPNIC
CountryCN
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAAPresent

โ˜๏ธ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierTier 3 โ€” Basic operator with some routing infrastructure
No specific classification

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
22%
24
routing
27%
23
services
20%
23
ownership
27%
34
reputation
19%
13
geolocation
30%
24
Overall24%1221
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-07 23:05:39 UTC
Last Seen2026-06-25 01:27:11 UTC
Profile Built2026-06-25 01:37:19 UTC
Data FreshnessLive
Signal Types30
Total Observations31
๐Ÿ” 30 signal types ยท 31 observations collected
This report is generated from 30+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.