IP Profile

🖥 119.181.68.223 — CHINA UNICOM China169 Backbone

CHINA UNICOM China169 Backbone · AS4837 · CN · 119.181.68.0/24 · Reputation · threat 0.50 · 1x · 1 sources · PTR No PTR record

reputation 30.4 (GUARDED) · first seen 11h ago · last seen 11h ago
No special flags

Reputation

30.4
GUARDED

Threat Score

0.50
1 sightings

ASN

AS4837
from indicator

Peers on ASN

2
malicious co-tenants

Bad neighborhood

0
119.181.68.0/24

Country

CN
from indicator

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP119.181.68.223
OrganizationCHINA UNICOM China169 Backbone
ASNAS4837
Netname
Netblock
Reverse DNS (PTR)No PTR record
CountryCN country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS4837 neighborhood)

High (.5-.75)
3
Avg threat 0.5 · peak 0.5 across 3 local IPs on AS4837

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

ip
2
auto-tagged
2
medium-severity
2

🔌 Sources (ASN neighborhood)

stamparm ipsum
3
FireHOL: firehol_level2.netset
1
Blocklist.de: all
1
Blocklist.de: imap
1
Blocklist.de: mail
1
Blocklist.de: postfix
1
Blocklist.de: pop3
1
ThreatView IP
1
IPsum Level 1
1
IPsum Level 2
1
IPsum Level 3
1
IPsum Level 4
1
Blocklist.de All
1
IPsum level 1 (all)
1

🌎 Geographic spread

📅 First-seen timeline

2026-08
3

Reporting Sources for this IP (1)

stamparm ipsumReputation

Passive DNS — domains resolving here (0)

No passive DNS yet. Run DNS audit.

🏠 Same /24 — 119.181.68.0/24 (0 other malicious IPs)

No other flagged IPs in this /24 (or subnet data not populated).

📡 Related indicators on AS4837 (2 total, 2 shown)

IPCategoryCountryThreat
123.235.88.150 IP ReputationCN dossier
60.216.89.122 IP BlocklistsCN dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo

Stored Enrichment Data Enrich Now

1 enrichment records on file (history preserved).

Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php