# 113.116.57.128 — IP Intelligence Summary

113.116.57.128 is an IPv4 address operated by IPMASTER CHINANET-GD (AS4134), geolocated to Shenzhen, China. It belongs to a mobile network. As of August 29, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/113.116.57.128
- Last updated: 2026-08-29

## Ownership

- Organization: IPMASTER CHINANET-GD
- Network name: CHINANET-GD
- Allocated block: 113.112.0.0/13
- ASN: AS4134 (https://ipdebrief.com/asn/4134)
- Regional registry: APNIC

## Location

- City: Shenzhen
- Region: Guangdong
- Country: China
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (55/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# INTELLIGENCE BRIEFING: 113.116.57.128

\## EXECUTIVE SUMMARY

The IP address 113.116.57.128/32 presents a **LOW RISK** profile with an overall risk score of 30/100. This address is classified as a residential/mobile endpoint operated by China Telecom (ASN 4134) within the CHINANET-GD network infrastructure in Shenzhen, Guangdong Province, China. No active threat indicators or malicious activity have been detected.

\## OWNERSHIP AND INFRASTRUCTURE

| Attribute | Value |

|-----------|-------|

| ASN | 4134 |

| Organization | IPMASTER CHINANET-GD |

| Network | CHINANET-GD (113.112.0.0/13) |

| RIR | APNIC |

| Country | China (CN) |

| Region | Guangdong |

| City | Shenzhen |

| Mobile Carrier | China Telecom Corp. Ltd. (MCC: 460, MNC: 03) |

| Connection Technology | LTE/5G |

**Network Role:** Firewalled / No Services detected. No open ports, TLS certificates, or HTTP services observed.

\## THREAT ASSESSMENT

**Risk Score:** 30/100 (Low Risk)

\### Threat Indicators

\- **Blacklist Count:** 0

\- **Known Attacker:** No

\- **Tor Exit Node:** No

\- **Spam Source:** No

\- **Known Campaigns:** None identified

\- **Abuse Confidence:** Not applicable

\### DNS and Control Plane

\- **DNSBL Status:** Listed on 2 of 8 threat intelligence feeds

\- **RPKI State:** Valid

\- **IRR Consistency:** Consistent

\- **Route Stability:** Unstable (route changes detected in 30-day window)

\- **DNSSEC:** Valid

\## NEIGHBORHOOD ANALYSIS

**Subnet:** 113.116.57.0/24

\- **Abuse Density:** 0%

\- **Classification:** Clean

\- **Total Siblings:** 14

\- **Active Siblings:** 2

\- **Threat Siblings:** 0

**Neighbor Risk Distribution:**

| Risk Level | Count |

|------------|-------|

| Low | 13 |

| Medium | 0 |

| High | 0 |

Neighboring IPs exhibit risk scores ranging from 0 to 30, with the majority showing no threat indicators. No correlated malicious activity detected within the /24 subnet.

\## OBSERVATION HISTORY

**Total Observations:** 13

**Last Updated:** 2026-07-23

Recent signal analysis indicates:

\- Stable ownership with no changes detected

\- Geographic consistency (China)

\- No persistent malicious behavior patterns

\- No threat observation count accumulation

\## NETWORK CLASSIFICATION FLAGS

\- ☑ Mobile: Yes

\- ☑ Firewalled: Yes

\- ☐ Cloud: No

\- ☐ CDN: No

\- ☐ VPN: No

\- ☐ Proxy: No

\- ☐ Tor: No

\- ☐ Hosting: No

\- ☐ Residential: No

\- ☐ Bogon: No

\- ☐ Anycast: No

\## RECOMMENDED ACTIONS

No specific firewall rules or blocking recommendations generated based on current risk profile. The IP presents minimal threat characteristics suitable for standard monitoring practices.

**Suggested Actions:**

\- Monitor for service activity if previously observed as closed

\- No immediate blocking required

\- Continue standard logging and observation

\## INTELLIGENCE CONCLUSION

IP 113.116.57.128 is a legitimate residential/mobile endpoint from a major Chinese telecommunications provider (China Telecom). The address exhibits no malicious indicators, is not associated with known threat actors, and operates within a clean neighborhood context. The low risk score (30) and absence of threat indicators support continued normal network operations without special restrictions. Standard logging and monitoring practices are sufficient for threat management.

## Nearby addresses

- 113.116.57.28 (https://ipdebrief.com/113.116.57.28)
- 113.116.57.36 (https://ipdebrief.com/113.116.57.36)
- 113.116.57.61 (https://ipdebrief.com/113.116.57.61)
- 113.116.57.78 (https://ipdebrief.com/113.116.57.78)
- 113.116.57.123 (https://ipdebrief.com/113.116.57.123)
- 113.116.57.124 (https://ipdebrief.com/113.116.57.124)
- 113.116.57.125 (https://ipdebrief.com/113.116.57.125)
- 113.116.57.126 (https://ipdebrief.com/113.116.57.126)
- 113.116.57.127 (https://ipdebrief.com/113.116.57.127)
- 113.116.57.205 (https://ipdebrief.com/113.116.57.205)
- 113.116.57.206 (https://ipdebrief.com/113.116.57.206)
- 113.116.57.207 (https://ipdebrief.com/113.116.57.207)

---

Source: IPDebrief, "113.116.57.128 IP intelligence", https://ipdebrief.com/113.116.57.128, updated 2026-08-29. Assessments are probabilistic.