117.60.113.80📋 Copy

# IP Intelligence Briefing: 117.60.113.80

## Executive Summary

IP 117.60.113.80 is a China Telecom mobile carrier endpoint classified as Moderate Risk (50/100). The address is associated with CHINANET-JS infrastructure in China and exhibits minimal threat indicators. No active malicious services detected; IP is firewalled with no open ports.

## Ownership & Infrastructure

• ASN: 4134 (Chinanet Hostmaster)
• Organization: CHINANET-JS (China Telecom Corp. Ltd.)
• CIDR Block: 117.60.0.0/14
• Geolocation: China (CN)
• Network Classification: Mobile (LTE/5G), Firewalled/No Services
• Provider Classification: Not CDN, Cloud, VPN, Proxy, or Tor exit node

## Threat Indicators

• Risk Score: 50 (Moderate)
• DNSBL Listings: 2 of 8 total lists
• Known Campaigns: None detected
• Blacklist Count: 0
• Is Tor Exit: False
• Is Known Attacker: False
• Is Spam Source: False
• Abuse Confidence: Not quantified

## Service Profile

• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Hosted Domains: 0
• Email Authentication: SPF/DMARC not configured
• Service Purpose: Firewalled / No Services

## Network Neighborhood Analysis

• Subnet: 117.60.113.0/24
• Abuse Density: 0
• Total Siblings: 4
• Risk Distribution: 0 High, 1 Medium, 3 Low
• Notable Neighbor: 117.60.113.20 (Risk Score: 50)

## Historical Observations

• Total Signals: 11
• Threat Persistence: 0 days
• Ownership Changes: 0
• Most Recent Signal: 2026-07-31T04:25:02Z (ownership/geolocation)
• IRR Consistency: Match (announced AS 4134, origin AS 4134)
• Route Stability: False
• Persistence Assessment: Not persistently malicious

## Control Plane

• BGP Prefix: 117.60.0.0/14
• Origin ASN: 4134
• Route Changes (30d): 0
• RPKI State: Not evaluated
• DNSSEC: Valid

## Relationships

• Same Network: CHINANET-JS (2 relationships)
• External Links: None detected (no hostnames, organizations, or certificates)

## Recommended Actions

Based on risk profile and classification:

• Firewall Policy: Monitor or allow inbound traffic from mobile carrier IP ranges; no immediate block required
• Threat Hunting: No active threats detected; continue monitoring for service changes
• Email Security: SPF/DMARC not configured for hosted domains (none present)
• WAF Rules: Standard mobile carrier traffic; no specific blocking rules recommended

## Intelligence Assessment

This IP belongs to China Telecom's mobile network infrastructure. The moderate risk score primarily reflects DNSBL listings rather than active malicious behavior. The IP is firewalled with no services exposed, suggesting it is a mobile device or carrier endpoint rather than a malicious server. The neighborhood shows minimal abuse density with only one other IP (117.60.113.20) sharing the moderate risk classification. No immediate action required beyond routine monitoring.

---

*Report generated: 2026-07-31*

*Data Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.