113.116.57.242📋 Copy

# IP Intelligence Briefing: 113.116.57.242/32

Classification: Low Risk

Risk Score: 15/100

Status: Monitored

Generated: 2026-07-23

---

## Executive Summary

IP address 113.116.57.242 is a mobile carrier IP associated with China Telecom's CHINANET-GD infrastructure in Shenzhen, Guangdong Province, China. The address shows low risk characteristics with no active threat indicators. The IP is part of a residential mobile carrier network (AS4134) with minimal abuse density in its /24 subnet.

---

## Technical Profile

Ownership & Network:

• ASN: 4134 (China Telecom)
• Organization: IPMASTER CHINANET-GD
• CIDR Block: 113.112.0.0/13
• RIR: APNIC
• Abuse Contact: anti-spam@chinatelecom.cn

Geolocation:

• Country: China (CN)
• Region: Guangdong (GD)
• City: Shenzhen
• Coordinates: 22.53°N, 114.14°E

Classification:

• Mobile Carrier: China Telecom Corp. Ltd. (MCC: 460, MNC: 03)
• Connection Type: LTE/5G Mobile Network
• Infrastructure: Firewalled / No Services
• Services: None detected (no open ports)

---

## Threat Assessment

Current Risk: Low

• Risk Score: 15
• Threat Indicators: None
• Blacklist Status: 0/0 active listings
• Tor/VPN/Proxy: Not detected
• Hosting/CDN: Not detected

DNSBL Analysis:

• Listed on 1 of 8 DNSBLs (dnsblListedCount: 1)
• Overall control plane score: 0.1304 (Minimal)

Campaign Indicators:

• No known campaign associations
• Zero certificate matches
• No banner correlations

---

## Neighborhood Analysis

Subnet: 113.116.57.0/24

• Total Siblings: 14
• Active Siblings: 2
• Abuse Density: 0 (Clean)
• Threat Siblings: 0

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 13

Neighboring IPs show risk scores ranging from 0-30, with the majority classified as low risk. No concentrated abuse patterns detected in the /24 subnet.

---

## Observation History

Signal Count: 12 observations

Latest Activity: 2026-07-23T12:04:20 UTC

Key Observations:

1. Geolocation Signals: Consistent Shenzhen, China attribution across multiple sources (AlienVault, MaxMind)

2. ASN Consistency: AS4134 chinanet confirmed in multiple observations

3. Organization: IPMASTER CHINANET-GD consistently identified

4. Network Type: Confirmed mobile carrier infrastructure

Temporal Indicators:

• No ownership changes detected
• Zero threat persistence days
• No persistent malicious activity observed
• Classification: Not persistently malicious

---

## Recommendations

Monitoring Status:

• Continue passive monitoring due to mobile carrier classification
• No immediate blocking required
• Standard mobile carrier policies apply

Actionable Rules:

• No firewall rules required
• No WAF/IPS rules necessary
• Traffic from this IP should be allowed as mobile carrier traffic

Related Entities:

• Network: CHINANET-GD (113.112.0.0/13)
• No related hostnames, organizations, or certificates identified

---

Intelligence Note: This IP represents legitimate mobile carrier infrastructure with no malicious activity indicators. The single DNSBL listing is likely a false positive or related to historical carrier-level filtering. No correlation to known threat campaigns or attacker infrastructure detected.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.