IP Intelligence Briefing: 111.30.42.43
Date: 2026-06-18
---
**1. Profile Summary**
- Risk Score: 50 (Moderate Risk)
- Ownership:
- ASN: 38019
- Organization: IRT-CHINAMOBILE-CN (CMNET)
- Country: China (CN)
- Subnet: 111.0.0.0/10 (Mobile Carrier)
- Geolocation:
- City: Beijing, China (Jinrong Ave., Xicheng District)
- Accuracy Radius: 2500 km
- Timezone: Unspecified
- Threat Indicators:
- No malicious indicators, blacklists, or known campaigns.
- Not a Tor exit node, spam source, or known attacker.
---
**2. Network Context**
- Infrastructure Type: Mobile Carrier (CMNET)
- Services:
- No open ports, TLS certificates, or HTTP services detected.
- Likely a mobile network node with firewalled access.
- Routing:
- BGP prefix: 111.30.0.0/18
- Route stability: Unstable (recent changes detected).
- DNSSEC valid; no DNSBL listings.
---
**3. Observation History (Last 30 Days)**
- Risk Trends: Minimal risk consistently recorded (operator score: 0.13).
- Geolocation: Plausible Beijing, China (2500 km accuracy).
- Threat Signals: No persistent malicious activity or campaign correlations.
---
**4. Relationships & Neighbors**
- Network Relationships:
- Linked to CMNET (same ASN/organization).
- No external subnets or hostnames associated.
- Subnet Neighbors:
- No neighboring IPs detected in 111.30.42.0/24.
- Subnet abuse density: 0% (clean).
---
**5. Recommendations**
- Monitoring: Track route stability and geolocation consistency.
- Firewall: No immediate blocking required; monitor for anomalies.
- Context: Legitimate mobile carrier infrastructure; no evidence of compromise.
Conclusion: 111.30.42.43 is a clean, legitimate IP under CMNET with no malicious indicators. No action required unless behavior changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | IRT-CHINAMOBILE-CN |
| ASN | AS38019 |
| Network Name | CMNET |
| CIDR Block | 111.0.0.0/10 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 15% | 2 | 2 |
| routing | 8% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 18% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 18% | 10 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-26 00:49:19 UTC |
| Last Seen | 2026-06-26 18:12:21 UTC |
| Profile Built | 2026-06-27 11:16:00 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 43 |
Full dossier details are available via our API.