IPDebrief

113.135.194.170

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP Intelligence Briefing: 113.135.194.170

*Generated via IPDebrief Threat Intelligence Platform*

---

**1. Core Profile**

- Overall Risk Score: 0 (Low Risk)

- Provider Score: 0 | Authority Score: 0 | Stability Score: 0

- Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).

- Network Role: Firewalled / No Services (no open ports, TLS, or HTTP services).

- AS: Unassigned | Organization: Xianghong Cao (CHINANET-SN, APNIC)

- Geolocation:

- Country: China (CN) | Region: Shanxi Province | City: Xi’an

- Coordinates: 34.77°N, 113.72°E | Timezone: Asia/Shanghai

- Subnet: 113.135.194.0/24 | Abuse Density: 0% (low risk subnet).

- Neighbors: 1 sibling IP (113.135.194.49) with moderate risk score (50).

---

**2. Observation History**

- June 12, 2026: Minimal risk signal (confidence: 30%).

- June 3, 2026: Stable ownership with no threats.

- June 1, 2026: Valid geolocation and ownership confirmed (APNIC).

- May 30, 2026: Geolocation data from MaxMind (Xi’an, China).

---

**3. Relationships & Context**

- Network: CHINANET-SN (APNIC) | Organization: Xianghong Cao.

- Subnet: 113.132.0.0/14 (shared with other Chinese ISPs).

- Total Siblings: 1 | Active Siblings: 1 | Threat Siblings: 0.

- Notable Neighbor: 113.135.194.49 (risk score: 50, potential moderate risk).

---

**4. Threat & Security Context**

- No spam, malware, or attack campaigns linked.

- No DNS anomalies, open services, or TLS certificates detected.

- Monitoring: Track subnet (113.135.194.0/24) for emerging risks.

- Firewall: No immediate action required; IP is stable and low-risk.

---

Conclusion: 113.135.194.170 is a low-risk IP owned by a Chinese ISP (CHINANET-SN) with no malicious activity detected. While its subnet has one moderate-risk neighbor, the IP itself shows no signs of compromise. SOC teams should monitor for anomalies but prioritize other high-risk assets.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡¨πŸ‡³ China
RegionShanxi provice
CityXi'an city
Timezoneβ€”
Latitude34.77
Longitude113.72

🏒 Ownership & Registration

OrganizationXianghong Cao
ASNAS4134
Network NameCHINANET-SN
CIDR Block113.132.0.0/14
RIRAPNIC
CountryCN
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)

πŸ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureMobile
Service PurposeFirewalled / No Services
Network TierUnknown β€” Insufficient routing data to classify
Mobile

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
0%
00
routing
0%
00
services
0%
00
ownership
27%
23
reputation
0%
00
geolocation
13%
11
Overall6%34
Coverage: 2/6 dimensions Β· Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-30 06:21:40 UTC
Last Seen2026-06-21 00:08:03 UTC
Profile Built2026-06-12 01:00:18 UTC
Data FreshnessLive
Signal Types15
Total Observations15
πŸ” 15 signal types Β· 15 observations collected
This report is generated from 15+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.