123.245.85.121📋 Copy

# IP Intelligence Briefing: 123.245.85.121/32

Classification: Low Risk | Risk Score: 25 | Report Date: 2026-06-26

## Executive Summary

IP 123.245.85.121 is a residential endpoint associated with China Telecom's Liaoning Branch (ASN 4134) in Heping, China. The IP demonstrates low-risk characteristics with no active threat indicators. Classification as residential infrastructure with mobile carrier connection (China Telecom, mcc: 460, mnc: 03, LTE/5G) indicates legitimate consumer use.

## Ownership & Geolocation

• Organization: CHINANET-LN Network Administrater Chinatelecom Liaoning Branch
• ASN: 4134 (China Telecom)
• Network: JunQu2 (123.245.64.0/19)
• Location: Heping, China (Region: LN)
• Geolocation Confidence: 52% via multi-signal inference
• RIR: APNIC

## Threat Assessment

Risk Indicators: None detected

• Blacklist Count: 0
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Active Campaigns: None identified

DNS/Email: No forward resolution, no PTR records, no hosted domains, no SPF/DMARC records.

Services: No open ports detected. No TLS certificates, HTTP titles, or service banners observed.

## Neighborhood Analysis (123.245.85.0/24)

• Total Subnet Size: 33 IP addresses
• Active Siblings: 6
• Threat Siblings: 4
• Abuse Density: 12.12%
• Classification: Mostly Clean
• Risk Distribution: 30 Low, 1 Medium, 0 High

The subnet exhibits moderate baseline activity with 4 threat-identified siblings, but the target IP remains low-risk.

## Observation History

Thirteen signals observed. Most recent activity recorded on 2026-06-26. Historical data indicates stable residential classification with minimal ownership changes. Threat persistence duration: 0 days. The IP is not classified as persistently malicious.

## Network Control Plane

• BGP Prefix: 123.244.0.0/14
• Route Stability: Unstable
• DNSBL Status: Listed on 1 of 8 checked lists
• RPKI State: Not available
• IRR Consistency: Not available

## Relationships

Ten relationship entries identified, all mapping to network "JunQu2" within the China Telecom infrastructure.

## Recommended Actions

No specific firewall rules or blocking actions recommended. Risk score of 25 falls within acceptable operational thresholds for residential IP addresses.

---

Analyst Notes: This IP represents normal residential traffic from China Telecom's Liaoning Branch. No immediate security concerns identified. Monitoring recommended for subnet-level activity patterns given the 4 threat-identified siblings in the /24 range.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.