113.101.246.194📋 Copy

# IP Intelligence Briefing: 113.101.246.194/32

Classification: LOW RISK / DEFENSIVE MONITORING

Date: 2026-07-27

Prepared For: SOC Analysts

---

## Executive Summary

IP address 113.101.246.194 is classified as Low Risk with a risk score of 0. The IP is associated with China Telecom (ASN 4134) and originates from Guangzhou, Guangdong, China. No malicious threat indicators have been identified. The subnet (113.101.246.0/24) demonstrates minimal abuse density with low-risk classification.

---

## Threat Profile

• Overall Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: Not applicable
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Blacklist Status: 0 listings

Threat Indicators: None detected. No indicators of malicious campaigns, spam activity, or attack patterns.

---

## Network Classification

• Origin ASN: 4134 (China Telecom)
• BGP Prefix: 113.96.0.0/12
• Network Role: Firewalled / No Services
• Infrastructure Type: Not identified as cloud, CDN, VPN, proxy, hosting, mobile, or residential
• Anycast: False
• Bogon: False

Control Plane:

• Origin ASN: 4134
• BGP Prefix: 113.96.0.0/12
• Route Stability: Unstable
• RPKI State: Not evaluated
• DNSSEC Valid: True

---

## Geolocation

• Country: China (CN)
• City: Guangzhou
• Region: Guangdong
• Coordinates: 23.12°N, 113.25°E
• Geo Source Count: 0
• Geo Consensus: False
• Geo Plausible: False

*Note: Geolocation data appears inconsistent with other profile fields. Manual verification recommended if precise location required.*

---

## Neighborhood Analysis (113.101.246.0/24)

• Subnet: 113.101.246.0/24
• Abuse Density: 0.125 (Low)
• Neighbor Count: 7
• Risk Distribution: 0 High, 0 Medium, 5 Low
• Threat Siblings: 1
• Active Siblings: 2
• Total Siblings: 8

Notable Neighbors:

• 113.101.246.70: Risk 25, Authority 50
• 113.101.246.99: Risk 25, Authority 50
• 113.101.246.144: Risk 25, Authority 50
• 113.101.246.190: Risk 25, Authority 50
• 113.101.246.10: Risk 0, Authority 50

---

## Observations & History

Total Observations: 8

Recent Activity:

• 2026-07-27 22:26:36 UTC: Subnet classification "mostly_clean" with 1 threat sibling
• 2026-07-27 22:26:19 UTC: Geolocation confirmed: Guangzhou, Guangdong, China
• 2026-07-27 22:26:08 UTC: Operator score: 0.15 (Minimal)
• 2026-07-27 22:24:56 UTC: DNSBL check: 0 of 8 lists

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: False

---

## Relationship Graph

• Related Entities: None identified
• Linked Hostnames: None
• Linked Organizations: None
• Linked Certificates: None

---

## Services & DNS

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• PTR Hostnames: None
• Forward Resolution Count: 0
• Email Authentication: Not configured (no SPF/DMARC records)

---

## Recommended Actions

No immediate firewall or blocking actions recommended. The IP demonstrates no active malicious behavior.

Defensive Considerations:

1. Monitor: Maintain observation on this IP due to China Telecom infrastructure and presence in subnet with 1 threat sibling

2. Context: Neighbor IPs 113.101.246.70, 113.101.246.99, 113.101.246.144, and 113.101.246.190 show elevated risk scores (25) and authority scores (50), suggesting potential hosting or residential proxy services

3. Investigate: If traffic originates from this IP with suspicious payloads, correlate with neighbor IPs for pattern analysis

---

## Confidence Metrics

• Overall Confidence: Low (insufficient data)
• Data Sufficiency: 0% (profile data largely unavailable)
• Observed Dimensions: Limited

*Note: The profile contains significant null/missing data fields. This may indicate the IP is newly observed, heavily filtered, or lacks sufficient traffic for comprehensive analysis. Ongoing monitoring recommended.*

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.