# 114.106.137.172 — IP Intelligence Summary

114.106.137.172 is an IPv4 address operated by Jinneng Wang (AS4134), geolocated to Middle Road, China. It belongs to a mobile network. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/114.106.137.172
- Last updated: 2026-10-06

## Ownership

- Organization: Jinneng Wang
- Network name: CHINANET-AH
- Allocated block: 114.104.0.0/14
- ASN: AS4134 (https://ipdebrief.com/asn/4134)
- Regional registry: APNIC

## Location

- City: Middle Road
- Region: Hefei,
- Country: China
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 114.106.137.172

**Classification:** Moderate Risk (Score: 40/100)

**Date of Analysis:** 2026-07-18

**Data Source:** IPDebrief Intelligence Platform

\---

\## Executive Summary

IP 114.106.137.172 is a Chinese residential mobile IP address associated with China Telecom's CHINANET-AH network infrastructure. The address demonstrates moderate risk characteristics with no active threat indicators, but maintains a reputation for low-risk profile. The subnet shows mixed risk distribution with 2 out of 10 sibling IPs flagged as threats.

\---

\## Network Ownership & Registration

| Attribute | Value |

|-----------|-------|

| **ASN** | 4134 |

| **Organization** | Jinneng Wang |

| **Netname** | CHINANET-AH |

| **CIDR Block** | 114.104.0.0/14 |

| **RIR** | APNIC |

| **Abuse Contact** | anti-spam@chinatelecom.cn |

| **ISP** | China Telecom Corp. Ltd. |

\---

\## Geolocation Analysis

| Attribute | Value |

|-----------|-------|

| **Country** | CN (China) |

| **Region** | Hefei |

| **City** | Middle Road |

| **Coordinates** | 35.86°N, 104.2°E |

| **Accuracy** | ±2500 km |

| **Timezone** | Asia/Shanghai |

**Validation:** Geo-plausibility assessment returned false with 0 probe samples.

\---

\## Network Role Classification

\- **Connection Type:** Mobile (LTE/5G)

\- **Carrier:** China Telecom (MCC: 460, MNC: 03)

\- **Infrastructure Type:** Mobile/Residential

\- **Open Ports:** None detected

\- **TLS Certificates:** None

\- **HTTP Services:** None

\- **Service Purpose:** Firewalled / No Services

\---

\## Threat Assessment

| Indicator | Status |

|-----------|--------|

| **Risk Score** | 40 (Moderate) |

| **Abuse Confidence** | Not scored |

| **Blacklist Status** | 0/0 lists (0 blacklisted) |

| **Known Campaigns** | None identified |

| **Tor Exit Node** | False |

| **Known Attacker** | False |

| **Spam Source** | False |

| **DNSBL Listings** | 2/8 lists |

| **Threat Persistence Days** | 0 |

| **Persistently Malicious** | False |

**Threat Indicators:** None detected

\---

\## Neighborhood Analysis (114.106.137.0/24)

| Metric | Value |

|--------|-------|

| **Subnet Abuse Density** | 0.2 |

| **Classification** | Mostly Clean |

| **Total Siblings** | 10 |

| **Active Siblings** | 6 |

| **Threat Siblings** | 2 |

| **Inherited Risk** | 5 |

**Sibling Risk Distribution:**

\- High Risk (0): 0 IPs

\- Medium Risk (5): 5 IPs

\- Low Risk (4): 4 IPs

**Notable Neighbor Risk Scores:**

\- 114.106.137.171: 55 (highest in subnet)

\- 114.106.137.38: 40

\- 114.106.137.66: 40

\- 114.106.137.107: 40

\- 114.106.137.186: 40

\- 114.106.137.222: 25

\- 114.106.137.63: 15

\- 114.106.137.56: 0

\- 114.106.137.169: 0

\---

\## Observation History

**Total Signals Observed:** 14 (as of 2026-07-18)

**Recent Signal Types:**

\- Ownership/ASN attribution (confidence: 0.95)

\- Geolocation inference (confidence: 0.52)

\- Network classification (confidence: 0.90)

\- Subnet abuse analysis (confidence: 0.75)

**Temporal Indicators:**

\- Ownership changes: 0

\- Threat observation count: 0

\- Threat persistence days: 0

\- Route stability: False

\---

\## Control Plane Data

| Metric | Value |

|--------|-------|

| **Origin ASN** | 4134 |

| **BGP Prefix** | 114.104.0.0/14 |

| **RPKI State** | Not available |

| **IRR Consistency** | Not available |

| **Route Changes (30d)** | 0 |

| **Route Stable** | False |

| **DNSSEC Valid** | True |

| **DNSBL Listed** | 2 of 8 lists |

| **Operator Score** | 0.1304 |

| **Operator Label** | Minimal |

\---

\## Recommended Security Actions

**Firewall Rules Generated:**

\`\`\`bash

\# iptables

iptables -A INPUT -s 114.106.137.172 -j DROP

\# nftables

nft add rule inet filter input ip saddr 114.106.137.172 drop

\# pfSense

114.106.137.172/32

\# Cloudflare WAF

Block 1

**Cloudflare WAF:**

\`\`\`json

{

"description": "Block 114.106.137.172 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 114.106.137.172"

}

}

\`\`\`

**AWS WAF:**

\`\`\`json

{

"Addresses": \["114.106.137.172/32"\],

"Description": "IPDebrief risk 40"

}

\`\`\`

\---

\## Network Relationships

**Identified Connections:**

\- CHINANET-AH (Same Network) × 3 instances

All relationship entries indicate same-network associations with the CHINANET-AH infrastructure, confirming the IP's placement within China Telecom's Hefei regional network block.

\---

\## Risk Assessment Summary

| Category | Rating |

|----------|--------|

| **Overall Risk** | Moderate (40/100) |

| **Threat Likelihood** | Low |

| **Abuse Potential** | Minimal |

| **Campaign Association** | None |

| **Persistence** | None detected |

\---

\## Intelligence Conclusion

IP 114.106.137.172 presents a moderate risk profile based on current observation data. The address is classified as a mobile/residential IP with no active threat indicators. While the subnet contains 2 flagged threat siblings, this specific IP shows no malicious activity or campaign correlations. The absence of open ports, TLS certificates, or web services suggests the address is not currently being leveraged for active infrastructure exploitation.

**Recommended Action:** Monitor for pattern changes. No immediate blocking required unless correlation with specific threat events occurs.

**Classification:** DEFCON 3 (Moderate Vigilance)

\---

*This briefing was generated by IPDebrief Intelligence Platform. All data sources are third-party verified. Action should be taken in accordance with local security policies.*

## Nearby addresses

- 114.106.137.38 (https://ipdebrief.com/114.106.137.38)
- 114.106.137.56 (https://ipdebrief.com/114.106.137.56)
- 114.106.137.63 (https://ipdebrief.com/114.106.137.63)
- 114.106.137.66 (https://ipdebrief.com/114.106.137.66)
- 114.106.137.107 (https://ipdebrief.com/114.106.137.107)
- 114.106.137.169 (https://ipdebrief.com/114.106.137.169)
- 114.106.137.171 (https://ipdebrief.com/114.106.137.171)
- 114.106.137.186 (https://ipdebrief.com/114.106.137.186)
- 114.106.137.222 (https://ipdebrief.com/114.106.137.222)

---

Source: IPDebrief, "114.106.137.172 IP intelligence", https://ipdebrief.com/114.106.137.172, updated 2026-10-06. Assessments are probabilistic.