114.230.241.158

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# THREAT INTELLIGENCE BRIEFING

Target: 114.230.241.158/32

Date: 2026-07-30

Classification: Low Risk

---

## EXECUTIVE SUMMARY

IP 114.230.241.158 is a low-risk address (Risk Score: 25) associated with China Telecom's mobile network infrastructure in China. No active threat indicators, open services, or persistent malicious behavior detected.

---

## NETWORK OWNERSHIP & GEOLOCATION

ASN: 4134 (Chinanet Hostmaster)
Organization: CHINANET-JS
CIDR Block: 114.224.0.0/12
Country: CN (China)
Mobile Carrier: China Telecom (MCC: 460, MNC: 03)
Technology: LTE/5G
Registration: APNIC RIR

---

## THREAT ASSESSMENT

Metric	Value
Risk Score	25 (Low Risk)
Abuse Confidence	Not elevated
Blacklist Count	0
DNSBL Listed	1/8 lists
Known Campaigns	None
Tor Exit Node	No
Known Attacker	No
Spam Source	No

Threat Indicators: None detected

---

## NETWORK BEHAVIOR

Service Status: Firewalled / No Services Detected
Open Ports: None
TLS Certificates: None
HTTP Services: None
DNS Records: No PTR hostnames, no reverse DNS resolution
Email Auth: No SPF/DMARC records (no hosted domain)

---

## NEIGHBORHOOD ANALYSIS

Subnet: 114.230.241.0/24

Total Neighbors: 6
Abuse Density: 0%
Risk Distribution: 5 Low, 0 Medium, 0 High
Neighbor Risk Scores: Consistent at 25 (low)

Neighbor IPs:

114.230.241.50 (Risk: 25)
114.230.241.74 (Risk: 25)
114.230.241.124 (Risk: 25)
114.230.241.166 (Risk: 25)
114.230.241.206 (Risk: 25)
114.230.241.237 (No data)

---

## OBSERVATION HISTORY

Total Observations: 15
Threat Observation Count: 0
Ownership Changes: 0 (stable ownership)
Threat Persistence: None detected
Recent Activity: Consistent mobile network signals

---

## RELATIONSHIPS

Same Network: CHINANET-JS (2 entries)

---

## RECOMMENDED ACTIONS

Classification: Monitor / Standard Traffic

Action	Priority
Allow traffic	Low
Block traffic	Not Recommended
Log for analysis	Standard
Add to blocklist	Not Recommended

Firewall Rules: No specific rules generated due to low risk profile.

---

## ANALYST NOTES

This IP belongs to China Telecom's mobile network infrastructure. The address shows:

Stable ownership with no ISP changes
No persistent malicious activity
Low abuse density in the /24 subnet
Mobile carrier origin (typical for consumer/enterprise mobile endpoints)
No open services detected (firewalled configuration)

SOC Recommendation: Treat as standard legitimate traffic from a mobile carrier. No immediate blocking required. Monitor for behavioral changes if traffic patterns deviate from baseline.

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇨🇳 China
Region	—
City	—
Timezone	—
Latitude	—
Longitude	—

🏢 Ownership & Registration

Organization	Chinanet Hostmaster
ASN	AS4134
Network Name	CHINANET-JS
CIDR Block	114.224.0.0/12
RIR	APNIC
Country	CN
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	20% (Poor)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Mobile
Service Purpose	Firewalled / No Services
Network Tier	Unknown — Insufficient routing data to classify

Mobile

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	25%	1	1
routing	25%	1	1
services	25%	1	1
ownership	0%	0	0
reputation	0%	0	0
geolocation	35%	2	2
Overall	18%	5	5

Coverage: 4/6 dimensions · Data sufficiency: partial

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-07-26 21:27:33 UTC
Last Seen	2026-07-30 09:05:20 UTC
Profile Built	2026-07-30 09:16:14 UTC
Data Freshness	Live
Signal Types	16
Total Observations	16

🔍 16 signal types · 16 observations collected

This report is generated from 16+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

114.230.241.158📋 Copy