# 117.69.235.147 — IP Intelligence Summary

117.69.235.147 is an IPv4 address operated by Jinneng Wang (AS4134), geolocated to Duji, China. It belongs to a mobile network. As of September 1, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/117.69.235.147
- Last updated: 2026-09-01

## Ownership

- Organization: Jinneng Wang
- Network name: CHINANET-AH
- Allocated block: 117.64.0.0/13
- ASN: AS4134 (https://ipdebrief.com/asn/4134)
- Regional registry: APNIC

## Location

- City: Duji
- Region: AH
- Country: China
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP INTELLIGENCE BRIEFING: 117.69.235.147

**Classification:** Moderate Risk / Mobile Origin

**Date Generated:** July 2026

**Analyst:** IPDebrief Intelligence Team

\---

\### EXECUTIVE SUMMARY

IP 117.69.235.147 is a mobile-originating address from the China Telecom mobile network (LTE/5G). The address carries a moderate risk score (40/100) and is associated with CHINANET-AH infrastructure (ASN 4134). No active threat indicators were detected, but the address shows limited stability and minimal service exposure.

\---

\### OWNERSHIP AND INFRASTRUCTURE

| Attribute | Value |

|-----------|-------|

| ASN | 4134 (CHINANET-AH) |

| Organization | Jinneng Wang |

| Network | 117.64.0.0/13 |

| RIR | APNIC |

| Mobile Carrier | China Telecom (MCC: 460, MNC: 03) |

| Geolocation | Duji, Anhui Province, China (35.86°N, 104.2°E) |

The address is classified as mobile traffic with no evidence of hosting, CDN, proxy, or VPN infrastructure. No open ports were detected on the target IP.

\---

\### THREAT ASSESSMENT

**Risk Score:** 40/100 (Moderate)

**Threat Indicators:** None detected

**Blacklist Count:** 0

**Known Campaigns:** None

**Control Plane Signals:**

\- Route stability: Unstable

\- DNSBL listings: 2 of 8 total lists

\- Operator score: 0.1304 (Minimal)

No evidence of persistent malicious activity or association with known attacker infrastructure.

\---

\### NETWORK CONTEXT

**Subnet Analysis (117.69.235.0/24):**

\- Total siblings: 12

\- Active siblings: 2

\- Threat siblings: 3

\- Abuse density: 25%

**Neighbor Risk Distribution:**

\- High risk: 0

\- Medium risk: 3 (risk scores: 25-40)

\- Low risk: 7

The /24 subnet shows mixed classification with elevated abuse density, consistent with the moderate risk assessment of the target IP.

\---

\### OBSERVATION HISTORY

**Total Observations:** 15 signals

**Most Recent:** 2026-07-18

**Temporal Signals:**

\- Geolocation consistent (China, Anhui region)

\- Ownership stable: 0 changes detected

\- Threat persistence: 0 days

\- Classification: Not persistently malicious

Historical data indicates stable ownership and consistent geographic attribution with no escalation in threat signals over the observation period.

\---

\### RELATIONSHIP GRAPH

**Active Relationships:** 4

\- All relationships: Same Network (CHINANET-AH)

The address has no cross-network relationships with distinct organizations, hostnames, or certificates.

\---

\### RECOMMENDED ACTIONS

**Firewall/Security Recommendations:**

1. **Monitor:** Track this IP for service activation or port opening

2. **Allow:** Permitted for mobile traffic (expected behavior)

3. **Block:** Not recommended at this time—risk level is moderate and no active threats detected

**Suggested Rules:**

\`\`\`

\# Monitor mobile traffic patterns

iptables -A INPUT -s 117.69.235.147 -j LOG --log-prefix "MONITOR: "

\# Allow established mobile connections

iptables -A INPUT -s 117.69.235.147 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

\`\`\`

\---

\### SOC ANALYST NOTES

\- No immediate threat action required

\- Monitor for service activation or changes in network behavior

\- Address is consistent with legitimate mobile user activity

\- Subnet abuse density warrants periodic review but does not indicate current threat

**Status:** MONITOR

## Nearby addresses

- 117.69.235.2 (https://ipdebrief.com/117.69.235.2)
- 117.69.235.3 (https://ipdebrief.com/117.69.235.3)
- 117.69.235.72 (https://ipdebrief.com/117.69.235.72)
- 117.69.235.75 (https://ipdebrief.com/117.69.235.75)
- 117.69.235.116 (https://ipdebrief.com/117.69.235.116)
- 117.69.235.136 (https://ipdebrief.com/117.69.235.136)
- 117.69.235.179 (https://ipdebrief.com/117.69.235.179)
- 117.69.235.186 (https://ipdebrief.com/117.69.235.186)
- 117.69.235.212 (https://ipdebrief.com/117.69.235.212)
- 117.69.235.214 (https://ipdebrief.com/117.69.235.214)
- 117.69.235.241 (https://ipdebrief.com/117.69.235.241)

---

Source: IPDebrief, "117.69.235.147 IP intelligence", https://ipdebrief.com/117.69.235.147, updated 2026-09-01. Assessments are probabilistic.