112.38.115.115📋 Copy

IP Intelligence Briefing for 112.38.115.115

Risk Profile: Low risk (score: 25). No malicious indicators, abuse confidence, or threat feeds detected.

Ownership & Geolocation:

• Registered to haijun li under CMNET (China Telecom).
• Geolocated in Shandong, China (approximate, 2500km accuracy radius).
• BGP origin ASN 24444, part of the 112.38.96.0/19 prefix.

Network Behavior:

• Firewalled / No Services: No open ports, TLS certificates, or HTTP services detected.
• Subnet Analysis: Part of 112.38.115.115/24 with 0% abuse density. One active neighbor (112.38.115.148) has a moderate risk score (50).
• Route Stability: BGP route is stable (no recent changes), with DNSSEC validation enabled.

Observation History:

• Consistent geolocation in China since June 2026.
• No detected threats, spam, or Tor activity.
• ICMP validation failed, indicating potential firewall restrictions.

Relationships:

• Linked to CMNET (same network).
• No correlated IPs, campaigns, or certificates identified.

Recommended Actions:

• No firewall rules or mitigation steps required based on current low-risk profile.
• Monitor for changes in geolocation or network behavior, especially if new services or open ports emerge.

Conclusion:

This IP is likely a legitimate residential or business endpoint in China, part of a stable network with no current malicious activity. No immediate action needed, but ongoing monitoring is advised for anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.