114.106.137.172📋 Copy

# IP Intelligence Briefing: 114.106.137.172

Classification: Moderate Risk (Score: 40/100)

Date of Analysis: 2026-07-18

Data Source: IPDebrief Intelligence Platform

---

## Executive Summary

IP 114.106.137.172 is a Chinese residential mobile IP address associated with China Telecom's CHINANET-AH network infrastructure. The address demonstrates moderate risk characteristics with no active threat indicators, but maintains a reputation for low-risk profile. The subnet shows mixed risk distribution with 2 out of 10 sibling IPs flagged as threats.

---

## Network Ownership & Registration

---

## Geolocation Analysis

Validation: Geo-plausibility assessment returned false with 0 probe samples.

---

## Network Role Classification

• Connection Type: Mobile (LTE/5G)
• Carrier: China Telecom (MCC: 460, MNC: 03)
• Infrastructure Type: Mobile/Residential
• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None
• Service Purpose: Firewalled / No Services

---

## Threat Assessment

Threat Indicators: None detected

---

## Neighborhood Analysis (114.106.137.0/24)

Sibling Risk Distribution:

• High Risk (0): 0 IPs
• Medium Risk (5): 5 IPs
• Low Risk (4): 4 IPs

Notable Neighbor Risk Scores:

• 114.106.137.171: 55 (highest in subnet)
• 114.106.137.38: 40
• 114.106.137.66: 40
• 114.106.137.107: 40
• 114.106.137.186: 40
• 114.106.137.222: 25
• 114.106.137.63: 15
• 114.106.137.56: 0
• 114.106.137.169: 0

---

## Observation History

Total Signals Observed: 14 (as of 2026-07-18)

Recent Signal Types:

• Ownership/ASN attribution (confidence: 0.95)
• Geolocation inference (confidence: 0.52)
• Network classification (confidence: 0.90)
• Subnet abuse analysis (confidence: 0.75)

Temporal Indicators:

• Ownership changes: 0
• Threat observation count: 0
• Threat persistence days: 0
• Route stability: False

---

## Control Plane Data

---

## Recommended Security Actions

Firewall Rules Generated:

```bash

# iptables

iptables -A INPUT -s 114.106.137.172 -j DROP

# nftables

nft add rule inet filter input ip saddr 114.106.137.172 drop

# pfSense

114.106.137.172/32

# Cloudflare WAF

Block 1

Cloudflare WAF:

```json

{

"description": "Block 114.106.137.172 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 114.106.137.172"

}

}

```

AWS WAF:

```json

{

"Addresses": ["114.106.137.172/32"],

"Description": "IPDebrief risk 40"

}

```

---

## Network Relationships

Identified Connections:

• CHINANET-AH (Same Network) × 3 instances

All relationship entries indicate same-network associations with the CHINANET-AH infrastructure, confirming the IP's placement within China Telecom's Hefei regional network block.

---

## Risk Assessment Summary

---

## Intelligence Conclusion

IP 114.106.137.172 presents a moderate risk profile based on current observation data. The address is classified as a mobile/residential IP with no active threat indicators. While the subnet contains 2 flagged threat siblings, this specific IP shows no malicious activity or campaign correlations. The absence of open ports, TLS certificates, or web services suggests the address is not currently being leveraged for active infrastructure exploitation.

Recommended Action: Monitor for pattern changes. No immediate blocking required unless correlation with specific threat events occurs.

Classification: DEFCON 3 (Moderate Vigilance)

---

*This briefing was generated by IPDebrief Intelligence Platform. All data sources are third-party verified. Action should be taken in accordance with local security policies.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.