112.66.191.214📋 Copy

# IP INTELLIGENCE BRIEFING: 112.66.191.214/32

Classification: MODERATE RISK

Date Generated: 2026-07-29

Analyst: IPDebrief Intelligence

---

## EXECUTIVE SUMMARY

IP 112.66.191.214 is a mobile network address associated with China Telecom's CHINANET infrastructure in Haikou, Hainan Province. The IP carries a moderate risk score (55/100) with three DNSBL listings and a flagged threat presence. No active services are detected, and the address is classified as a firewalled/no-service endpoint.

---

## OWNERSHIP & INFRASTRUCTURE

• ASN: AS4134 (China Telecom)
• Organization: ipadmin hainanrole
• Network: CHINANET-HI (112.66.0.0/15)
• Registration RIR: APNIC
• Abuse Contact: anti-spam@chinatelecom.cn
• Mobile Carrier: China Telecom (MCC: 460, MNC: 03)
• Connection Type: LTE/5G Mobile

---

## GEOLOCATION ANALYSIS

• Country: China (CN)
• Region: Hainan
• City: Haikou
• Coordinates: 20.05°N, 110.35°E
• Geo Validation: GEOPLAUSIBLE FLAG FALSE (confidence variance between signals)

Multiple geolocation signals observed with confidence ranging from 0.30 to 0.95, indicating inconsistent data sources. One signal placed location at 35.86°N, 104.2°E with 2500km accuracy radius, suggesting potential spoofing or inference limitations.

---

## THREAT INDICATORS

• Risk Score: 55 (Moderate)
• DNSBL Listings: 3 of 8 total lists
• Threat Flags: has_threats=TRUE
• Abuse Confidence: Not quantified
• Tor Exit: FALSE
• Known Attacker: FALSE
• Spam Source: FALSE
• Campaign Correlation: 0 correlated IPs

---

## NETWORK OBSERVATION HISTORY

11 observations recorded on 2026-07-29:

• ASN Confirmation: AS4134 chinanet (confidence 0.75)
• Organization: ipadmin hainanrole (confidence 0.90)
• Geolocation Signals: Multiple conflicting coordinates observed
• Operator Score: 0.1304 (Minimal)
• Geo Consensus: TRUE across sources
• Threat Persistence: 0 threat persistence days

No evidence of persistent malicious activity detected.

---

## SERVICE PROFILE

• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None
• Service Purpose: Firewalled / No Services
• Forward Resolution: FALSE (0 hostnames)

---

## SUBNET ANALYSIS (112.66.191.0/24)

• Abuse Density: 0
• Total Neighbors: 2
• Risk Distribution: 1 low, 0 medium, 0 high
• Neighbor IPs:

- 112.66.191.29: Risk 30, Authority 50

- 112.66.191.30: No scoring data

Subnet exhibits minimal abuse density with no high-risk neighbors identified.

---

## CONTROL PLANE DATA

• Route Stability: FALSE
• BGP Prefix: 112.66.0.0/15
• Origin ASN: 4134
• RPKI State: Not available
• Route Changes (30d): 0
• DNSSEC Valid: TRUE
• Delegation Age: Not available

---

## RECOMMENDED ACTIONS

1. Monitor Closely: Moderate risk score with threat flags warrants ongoing observation

2. DNSBL Monitoring: Track activity on 3 DNSBL listings for reputation changes

3. Mobile Traffic Filtering: Consider rate-limiting mobile-originated connections from this CIDR block

4. Geolocation Validation: Correlate with additional sources due to inconsistent coordinate data

5. Neighbor Watch: Monitor 112.66.191.29 for potential coordinated activity

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.